CVE-2025-12888: Constant Time Issue with Xtensa-based ESP32 and X22519
Constant Time Issue with Xtensa-based ESP32 and X22519
Other sources
Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of X25519, which is now turned on as the default for Xtensa.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12888?
CVE-2025-12888 has been classified as a high-severity vulnerability due to its exploitation potential in cryptographic implementations.
How do I fix CVE-2025-12888?
To address CVE-2025-12888, it is recommended to use a low memory implementation for X25519 on Xtensa-based ESP32 chips.
What kind of devices are affected by CVE-2025-12888?
CVE-2025-12888 primarily affects devices using the Espressif ESP32 architecture with X25519 implementations.
What are the implications of CVE-2025-12888?
The implications of CVE-2025-12888 involve potential timing side-channel attacks that can compromise cryptographic security.
How can I verify if my product is vulnerable to CVE-2025-12888?
You can verify vulnerability to CVE-2025-12888 by assessing the cryptographic implementations in your Xtensa-based ESP32 based products.