CVE-2025-13912 — Potential non-constant time compiled code with Clang LLVM

CVE-2025-13912

Potential non-constant time compiled code with Clang LLVM PUBLISHED

Description (CNA)

Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 0 before 5.8.4

CWE

CWE-203

References

https://github.com/wolfSSL/wolfssl/pull/9148

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.