mbedtls vulnerabilities (Root)
14 vulnerabilities.
-
mbedtlsRoot An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can... 9.8 Critical -
mbedtlsRoot An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while... 9.1 Critical -
mbedtlsRoot An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is... 9.1 Critical -
mbedtlsRoot Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number... 7.7 High -
mbedtlsRoot Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. 5.3 Medium -
mbedtlsRoot Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can... 4.0 Medium -
mbedtlsRoot Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are... 8.9 High -
mbedtlsRoot Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in... 4.8 Medium -
mbedtlsRoot Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... 7.8 High -
mbedtlsRoot Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... 5.4 Medium -
mbedtlsRoot Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... 5.4 Medium -
mbedtlsRoot An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... 8.2 High -
mbedtlsRoot Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... 7.5 High -
mbedtlsRoot An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium