HOMEVULNERABILITIESCVE-2018-12437
MEDIUM

CVE-2018-12437

CWE-200Published: June 15, 2018· Updated: Jun 17, 2026

4.9
CVSS v3.1

Official Description

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

NVD Source

Technical Analysis

CVE-2018-12437 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 4.9.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorPhysical
Attack ComplexityHigh
Privileges Req.None
User InteractionNone
ScopeChanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected Vendors & Products

libtom1 product(s)
libtomcrypt
trustedfirmware1 product(s)
op-tee
Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

All References (4)

Quick Facts

CVE IDCVE-2018-12437
CVSS Score4.9 / 10
SeverityMEDIUM
WeaknessCWE-200
CISA KEVNo
Affected2 vendor(s)
PublishedJun 15, 2018

Related CVEs (CWE-200)

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2018-12437 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.