CVE-2019-18222 The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in Arm Mbed Crypto and Mbed TLS Expose Private Keys Two vulnerabilities have been identified in Arm Mbed Crypto and Mbed TLS that could allow local attackers to recover private keys through side-channel attacks. CVE-2019-18222, published on January 23, 2020, involves an issue with the ECDSA signature implementation, while CVE-2019-16910, published on September 26, 2019, relates to insufficient entropy in RNG when deterministic ECDSA is enabled. 3 sources 43

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (2)

Arm Mbed Crypto Mbed TLS