{"id":"CVE-2026-25832","aliases":["ALPINE-CVE-2026-25832","AZL-103380","DEBIAN-CVE-2026-25832","EUVD-2026-77305","GHSA-583p-89c4-mqq9","MGASA-2026-0375","UBUNTU-CVE-2026-25832","openSUSE-SU-2026:11215-1","openSUSE-SU-2026:11267-1","openSUSE-SU-2026:21865-1"],"status":"published","title":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts...","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00282,"percentile":0.20822,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-669"],"published":"2026-07-08T00:00:00Z","modified":"2026-11-03T06:33:01Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["4.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls3","fixed_in":["3.6.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["3.6.7-2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"mbedtls","fixed_in":["3.6.7-bp160.1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"24.20.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.4-1","2.28.5-1","2.28.6-1","2.28.7-1","2.28.7-1.1","2.28.7-1.1~exp1","2.28.8-1","3.6.0-1","3.6.0-2","3.6.0-3","3.6.2-1","3.6.2-2","3.6.2-3","3.6.3-1","3.6.4-1","3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.6-0.1~deb13u1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.6-0.1~deb13u1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-2"}]}],"versions":["3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.6-0.1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1","2.8.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2","2.16.4-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1","2.28.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.6-1ubuntu1","2.28.7-1ubuntu1","2.28.7-1.1ubuntu1","2.28.8-1","2.28.8-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.5-0.1ubuntu2","3.6.6-0.1ubuntu1","3.6.7-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1","3.6.5-0.1ubuntu1","3.6.5-0.1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-bp160.1.1"}]}]}],"products":[{"vendor":"arm","product":"mbed tls"},{"vendor":"trustedfirmware","product":"mbed tls"}],"references":[{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/"},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25832","tags":["web"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories"},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group"},{"url":"https://github.com/advisories/GHSA-583p-89c4-mqq9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-25832","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-25832","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0375.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35972","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BALMLPIK3FBKPIGK5RZX3VUWR2QCCGQ/","tags":["web"]},{"url":"https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-25832","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25832","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54435","tags":["web"]},{"url":"https://bugzilla.suse.com/1280186","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-25832","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-09-14T16:00:15.43Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T13:41:19.694734Z"}],"euvd":[{"id":"EUVD-2026-77305","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-09-14T16:00:15Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T17:28:20.426868Z"}],"ghsa":[{"id":"GHSA-583p-89c4-mqq9","title":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts...","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T09:30:59Z","modified":"2026-09-14T09:31:03Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T15:11:48.80782Z"}],"nvd":[{"id":"CVE-2026-25832","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T07:17:16.49Z","modified":"2026-09-22T19:56:19.073Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T14:12:46.980627Z"}],"osv":[{"id":"ALPINE-CVE-2026-25832","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T07:17:16.49Z","modified":"2026-11-03T06:33:01.917536008Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"DEBIAN-CVE-2026-25832","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T07:17:16.49Z","modified":"2026-09-23T08:47:27.468184978Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"UBUNTU-CVE-2026-25832","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T07:17:00Z","modified":"2026-10-17T12:56:18.946060476Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"AZL-103380","title":"CVE-2026-25832 affecting package nodejs 24.20.0-1","description":"In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.","status":"published","published":"2026-09-14T07:17:16Z","modified":"2026-09-21T14:16:43.91854653Z","updated_at":"2026-11-02T15:28:00.794214Z"},{"id":"MGASA-2026-0375","title":"Updated mbedtls packages fix security vulnerabilities","description":"TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised\ngroup. (CVE-2026-25832)\nPossible buffer overflow in mbedtls_ecdh_calc_secret(). (CVE-2026-35336)\nX.509 CA bit forgery via invalid basicConstraints extension.\n(CVE-2026-49300)\nUse-after-free in mbedtls_pkcs7_free() when reusing a PKCS7 context.\n(CVE-2026-50579)\nRemote buffer overflow in TLS 1.2 ECDHE-PSK client handshake.\n(CVE-2026-50580)\nExtended master secret calculation failure ignored. (CVE-2026-50581)\nA 1-byte buffer overread when parsing a malformed ECC public key in the\nPK module. (CVE-2026-50583)\nChaCha20 counter overflow can reuse keystream. (CVE-2026-50584)\nIncomplete context reset in mbedtls_ssl_session_reset().\n(CVE-2026-50585)\nA potential information disclosure in TLS 1.2 servers using session\ntickets. If the session ticket write callback failed without setting the\nlifetime output parameter, Mbed TLS could send 4 bytes of uninitialized\nstack memory to the peer in the NewSessionTicket message.\n(CVE-2026-50586)\nTiming side-channel in RSA PKCS#1 v1.5 decryption. (CVE-2026-50587)\nOut-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange parsing.\n(CVE-2026-50588)\nIgnored TLS 1.3 resumption secret derivation error. (CVE-2026-50640)\nHeap corruption with early renegotiation after corrupted record in DTLS.\n(CVE-2026-50713)\nSide channel leak in ECC optimized modp. (CVE-2026-54435)\nSignature algorithm restrictions not enforced on certificate chain.\n(CVE-2026-54441)\nA random generator fault can compromise TLS data integrity.\n(CVE-2026-73064)\n","status":"published","published":"2026-09-04T17:53:22Z","modified":"2026-09-04T18:00:03.366057546Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11215-1","title":"libmbedtls23-4.2.0-1.1 on GA media","description":"These are all security issues fixed in the libmbedtls23-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-08T00:00:00Z","modified":"2026-07-09T10:00:10.068287056Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11267-1","title":"libeverest-3.6.7-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-07-15T10:00:14.51139588Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21865-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\nChanges in mbedtls:\n\n- Update to version 3.6.7:\n  * CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised\n    group (boo#1280186)\n  * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected\n    group was not advertised in the original ClientHello\n","status":"published","published":"2026-09-16T15:52:16Z","modified":"2026-09-17T18:23:14.639077714Z","updated_at":"2026-11-02T16:58:42.426393Z"}]}}