# CWE-385.

Every Advisory and CVE whose sources give the weakness CWE-385, newest first.

## Records, newest first

- [phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery](https://agentprime.io/advisories/GHSA-q97c-8qh3-fpc6.md)
  `GHSA-q97c-8qh3-fpc6`, `CVE-2026-84308`, `PKSA-12sz-bcny-pk4m` · Packagist `phpseclib/phpseclib`: affected `<3.0.57 || >=4.0.0, <4.0.1`, fixed in `3.0.57`, `4.0.1` · CVSS 6.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-208, CWE-385
- [free5GC AUSF uses non-constant-time authentication comparisons and logs XRES\* in 5G-AKA](https://agentprime.io/advisories/GHSA-fp46-6vfw-gc9c.md)
  `GHSA-fp46-6vfw-gc9c`, `CVE-2026-55785`, `GO-2026-6328` · Go `github.com/free5gc/ausf`: affected `<1.4.5`, fixed in `1.4.5` · CVSS 3.7 Low · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure, CWE-208, CWE-385
- [PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle](https://agentprime.io/advisories/GHSA-5739-39v2-5754.md)
  `GHSA-5739-39v2-5754` · Packagist `web-token/jwt-library`: affected `<3.4.10 || >=4.0.0, <4.0.7 || >=4.1.0, <4.1.7`, fixed in `3.4.10`, `4.0.7`, `4.1.7` · CVSS 4.0, no score published · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-208, CWE-385
- [PostgreSQL discloses MD5-hashed passwords via covert timing channel](https://agentprime.io/advisories/CVE-2026-6478.md)
  `CVE-2026-6478` · CVE record: PostgreSQL · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-385
- [Bouncy Castle Has Covert Timing Channel Vulnerability](https://agentprime.io/advisories/GHSA-p93r-85wp-75v3.md)
  `GHSA-p93r-85wp-75v3`, `CVE-2026-5598` · Maven `org.bouncycastle:bcprov-jdk14` and 2 more: affected `>=1.71, <1.84`, fixed in `1.84` · CVSS 8.9 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-385
- [A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0…](https://agentprime.io/advisories/CVE-2025-69893.md)
  `CVE-2025-69893` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-385
- [In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature.](https://agentprime.io/advisories/CVE-2025-66442.md)
  `CVE-2025-66442` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-385
- [OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper](https://agentprime.io/advisories/GHSA-6pfc-6m7w-m8fx.md)
  `GHSA-6pfc-6m7w-m8fx`, `CVE-2026-41390` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 7.0 High · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-385, CWE-807
- [vLLM is vulnerable to timing attack at bearer auth](https://agentprime.io/advisories/GHSA-wr9h-g72x-mwhm.md)
  `GHSA-wr9h-g72x-mwhm`, `CVE-2025-59425`, `PYSEC-2026-2026` · PyPI `vllm`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2025 · Tags: CWE-385
- [Timing side-channel in SM2 algorithm on 64 bit ARM](https://agentprime.io/advisories/CVE-2025-9231.md)
  `CVE-2025-9231` · CVE record: OpenSSL OpenSSL · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-385
- [Timing Attack Vulnerability in SCRAM Authentication](https://agentprime.io/advisories/GHSA-3wfh-36rx-9537.md)
  `GHSA-3wfh-36rx-9537`, `CVE-2025-59432` · Maven `com.ongres.scram:scram-common`: affected `<3.2`, fixed in `3.2` · CVSS 6.6 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-208, CWE-385
- [In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.](https://agentprime.io/advisories/CVE-2025-49087.md)
  `CVE-2025-49087` · CVE record: Mbed mbedtls · CVSS 4.0 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-385
- [Curve25519 Blinding](https://agentprime.io/advisories/CVE-2025-7396.md)
  `CVE-2025-7396` · CVE record: wolfSSL wolfSSL · CVSS 5.6 Medium · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-385
- [File Browser’s insecure JWT handling can lead to session replay attacks after logout](https://agentprime.io/advisories/GHSA-7xwp-2cpp-p8r7.md)
  `GHSA-7xwp-2cpp-p8r7`, `CVE-2025-53826`, `GO-2025-3812` · Go `github.com/filebrowser/filebrowser` and 1 more: affected `<=2.39.0`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 16 Jul 2025 · Tags: Authentication bypass, CWE-305, CWE-385
- [OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using…](https://agentprime.io/advisories/CVE-2025-27587.md)
  `CVE-2025-27587` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 16 Jun 2025 · Tags: CWE-385
- [Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations](https://agentprime.io/advisories/GHSA-q65w-fg65-79f4.md)
  `GHSA-q65w-fg65-79f4`, `CVE-2025-29780` · PyPI `postquantum-feldman-vss`: affected `<=0.8.0b2`, no fixed version yet · CVSS 5.8 Medium · Not analysed yet · Published 14 Mar 2025 · Tags: Information disclosure, CWE-208, CWE-385
- [Timing side-channel in ECDSA signature computation](https://agentprime.io/advisories/CVE-2024-13176.md)
  `CVE-2024-13176` · CVE record: OpenSSL OpenSSL · CVSS 4.1 Medium · Not analysed yet · Published 20 Jan 2025 · Tags: CWE-385
- [Ruby: openssl: ruby marvin attack](https://agentprime.io/advisories/CVE-2025-0306.md)
  `CVE-2025-0306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-385
- [Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications](https://agentprime.io/advisories/GHSA-j6vm-4r7g-x4gr.md)
  `GHSA-j6vm-4r7g-x4gr`, `CVE-2024-11862` · NuGet `Devolutions.XTS.NET`: affected `<2024.11.26`, fixed in `2024.11.26` · CVSS 5.1 Medium · Not analysed yet · Published 27 Nov 2024 · Tags: CWE-385
- [Node: Node.js versions which bundle an unpatched version of OpenSSL or run against a…](https://agentprime.io/advisories/CVE-2023-46809.md)
  `CVE-2023-46809` · CVE record: NodeJS Node · CVSS 7.4 High · Not analysed yet · Published 7 Sept 2024 · Tags: CWE-385
- [An issue was discovered in Matrix libolm through 3.2.16.](https://agentprime.io/advisories/CVE-2024-45192.md)
  `CVE-2024-45192` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: CWE-385
- [Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options](https://agentprime.io/advisories/CVE-2024-36405.md)
  `CVE-2024-36405` · CVE record: open-quantum-safe liboqs · CVSS 5.9 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-208, CWE-385
- [Observable Timing Discrepancy in pypqc](https://agentprime.io/advisories/GHSA-hvh4-5qr6-3v7r.md)
  `GHSA-hvh4-5qr6-3v7r` · PyPI `pypqc`: affected `>=0.0.4, <=0.0.6.2`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-385, CWE-733
- [iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations.](https://agentprime.io/advisories/CVE-2024-26306.md)
  `CVE-2024-26306` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2024 · Tags: CWE-385
- [IBM Common Cryptographic Architecture information disclosure](https://agentprime.io/advisories/CVE-2023-33855.md)
  `CVE-2023-33855` · CVE record: IBM Common Cryptographic Architecture · CVSS 3.7 Low · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-385
- [Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.](https://agentprime.io/advisories/CVE-2024-25964.md)
  `CVE-2024-25964` · CVE record: Dell PowerScale OneFS · CVSS 5.3 Medium · Not analysed yet · Published 25 Mar 2024 · Tags: CWE-385
- [Libgcrypt: vulnerable to marvin attack](https://agentprime.io/advisories/CVE-2024-2236.md)
  `CVE-2024-2236` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-385
- [m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657](https://agentprime.io/advisories/GHSA-944j-8ch6-rf6x.md)
  `GHSA-944j-8ch6-rf6x`, `CVE-2023-50781`, `PYSEC-2026-1595` · PyPI `m2crypto`: affected `<=0.40.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 5 Feb 2024 · Tags: Information disclosure, CWE-208, CWE-385
- [Python Cryptography package vulnerable to Bleichenbacher timing oracle attack](https://agentprime.io/advisories/GHSA-3ww4-gg4f-jr7f.md)
  `GHSA-3ww4-gg4f-jr7f`, `CVE-2023-50782`, `PYSEC-2026-1283` · PyPI `cryptography`: affected `<42.0.0`, fixed in `42.0.0` · CVSS 7.5 High · Not analysed yet · Published 5 Feb 2024 · Tags: Information disclosure, CWE-208, CWE-385
- [An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2.](https://agentprime.io/advisories/CVE-2024-23170.md)
  `CVE-2024-23170` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: CWE-385
- [Minerva timing attack on P-256 in python-ecdsa](https://agentprime.io/advisories/GHSA-wj6h-64fc-37mp.md)
  `GHSA-wj6h-64fc-37mp`, `CVE-2024-23342`, `PYSEC-2026-1325` · PyPI `ecdsa`: affected `*`, no fixed version yet · CVSS 7.4 High · Not analysed yet · Published 22 Jan 2024 · Tags: Information disclosure, CWE-208, CWE-385
- [Marvin Attack: potential key recovery through timing sidechannels](https://agentprime.io/advisories/GHSA-4grx-2x9w-596c.md)
  `GHSA-4grx-2x9w-596c`, `CVE-2023-49092`, `GHSA-c38w-74pg-36hr`, `RUSTSEC-2023-0071` · crates.io `rsa`: affected `>=0.0.0-0`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 22 Nov 2023 · Tags: CWE-385
- [Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…](https://agentprime.io/advisories/CVE-2023-3640.md)
  `CVE-2023-3640` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-385
- [Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-35166.md)
  `CVE-2020-35166` · CVE record: Dell BSAFE Crypto-C Micro Edition and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-385
- [Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-35164.md)
  `CVE-2020-35164` · CVE record: Dell Dell BSAFE Crypto-C Micro Edition · CVSS 6.7 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-385
- [Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-29506.md)
  `CVE-2020-29506` · CVE record: Dell Dell BSAFE Crypto-C Micro Edition · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-385
- [Covert Timing Channel in Apache CXF](https://agentprime.io/advisories/GHSA-qc2p-q7x9-v64p.md)
  `GHSA-qc2p-q7x9-v64p`, `CVE-2017-3156` · Maven `org.apache.cxf.karaf:apache-cxf`: affected `<3.0.13 || >=3.1.0, <3.1.10`, fixed in `3.0.13`, `3.1.10` · CVSS 7.5 High · Not analysed yet · Published 13 May 2022 · Tags: CWE-385
- [Dell BSAFE SSL-J: Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may…](https://agentprime.io/advisories/CVE-2022-24409.md)
  `CVE-2022-24409` · CVE record: Dell Dell BSAFE SSL-J · CVSS 5.9 Medium · Not analysed yet · Published 23 Feb 2022 · Tags: CWE-385
- [Timing attacks in python-rsa](https://agentprime.io/advisories/GHSA-xrx6-fmxq-rjj2.md)
  `GHSA-xrx6-fmxq-rjj2`, `CVE-2020-25658`, `PYSEC-2020-100` · PyPI `rsa`: affected `>=2.1, <4.7`, fixed in `4.7` · CVSS 7.5 High · Not analysed yet · Published 30 Apr 2021 · Tags: Weak cryptography or TLS, CWE-385
- [m2crypto: A flaw was found in all released versions of m2crypto…](https://agentprime.io/advisories/CVE-2020-25657.md)
  `CVE-2020-25657` · CVE record: m2crypto · No CVSS score · Not analysed yet · Published 12 Jan 2021 · Tags: CWE-385
- [The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the u…](https://agentprime.io/advisories/CVE-2020-14341.md)
  `CVE-2020-14341` · CVE record: Red Hat Red Hat Single Sign-On · No CVSS score · Not analysed yet · Published 12 Jan 2021 · Tags: CWE-385
- [RSA decryption vulnerable to Bleichenbacher timing vulnerability](https://agentprime.io/advisories/GHSA-hggm-jpg3-v476.md)
  `GHSA-hggm-jpg3-v476`, `CVE-2020-25659`, `PYSEC-2021-62` · PyPI `cryptography`: affected `<3.2`, fixed in `3.2` · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2020 · Tags: CWE-385
- [Observable discrepancy in \[UNKNOWN\] Linux Kernel](https://agentprime.io/advisories/CVE-2019-19338.md)
  `CVE-2019-19338` · CVE record: \[UNKNOWN\] Linux Kernel · CVSS 5.5 Medium · Not analysed yet · Published 13 Jul 2020 · Tags: Information disclosure, CWE-385
- [Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior…](https://agentprime.io/advisories/CVE-2019-3732.md)
  `CVE-2019-3732` · CVE record: Dell RSA BSAFE Crypto-C Micro Edition and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2019 · Tags: CWE-385
- [openssl: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious…](https://agentprime.io/advisories/CVE-2016-7056.md)
  `CVE-2016-7056` · CVE record: The OpenSSL Project openssl · CVSS 5.5 Medium · Not analysed yet · Published 10 Sept 2018 · Tags: CWE-385
- [\[UNKNOWN\] gnutls: A cache-based side channel in GnuTLS implementation that leads to plain text recovery in…](https://agentprime.io/advisories/CVE-2018-10846.md)
  `CVE-2018-10846` · CVE record: \[UNKNOWN\] gnutls · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-385
- [\[UNKNOWN\] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky…](https://agentprime.io/advisories/CVE-2018-10845.md)
  `CVE-2018-10845` · CVE record: \[UNKNOWN\] gnutls · CVSS 5.9 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-385
- [\[UNKNOWN\] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky…](https://agentprime.io/advisories/CVE-2018-10844.md)
  `CVE-2018-10844` · CVE record: \[UNKNOWN\] gnutls · CVSS 5.9 Medium · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-385
- [xorg-x11-server: It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the…](https://agentprime.io/advisories/CVE-2017-2624.md)
  `CVE-2017-2624` · CVE record: Xorg xorg-x11-server · CVSS 5.9 Medium · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-385

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-385>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-385/>. Everything for agents: <https://agentprime.io/llms.txt>.