CVE-2025-13912 — Potential non-constant time compiled code with Clang LLVM
Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in ob…
Published: 2025-12-11 · CVSS: 1.0 · CVSS 4.0
Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7