Arm Mbed Tls vulnerabilities

• arm mbed tls An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.... CVE-2026-34877 Fix available 9.8 CriticalApril 2, 2026
• arm mbed tls, tf-psa-crypto +1 more An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is... CVE-2026-34872 Fix available 9.1 CriticalApril 1, 2026
• arm mbed tls, trustedfirmware tf-psa-crypto +1 more An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1... CVE-2026-34871 Fix available 6.7 MediumApril 1, 2026
• arm mbed tls, trustedfirmware tf-psa-crypto +1 more Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number... CVE-2026-25835 Fix available 7.7 HighApril 1, 2026
• arm mbed tls, tf-psa-crypto +1 more In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB... CVE-2025-66442 5.1 MediumApril 1, 2026
• arm mbed tls Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. CVE-2025-59438 Fix available 5.3 MediumOctober 21, 2025
• arm mbed tls Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct... CVE-2025-54764 Fix available 6.2 MediumOctober 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can... CVE-2025-48965 Fix available 4.0 MediumJuly 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are... CVE-2025-47917 Public exploitFix available 8.9 HighJuly 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in... CVE-2025-52497 Fix available 4.8 MediumJuly 4, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... CVE-2025-52496 Fix available 7.8 HighJuly 4, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... CVE-2025-27810 Fix available 5.4 MediumMarch 25, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... CVE-2025-27809 Fix available 5.4 MediumMarch 25, 2025
• arm mbed tls In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure... CVE-2024-30166 9.1 CriticalApril 3, 2024
• arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 more An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... CVE-2024-28960 Fix available 8.2 HighMarch 29, 2024
• arm mbed tls Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... CVE-2024-23775 Fix available 7.5 HighJanuary 31, 2024
• arm mbed tls An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... CVE-2024-23170 Fix available 5.5 MediumJanuary 31, 2024
• arm mbed tls An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum... CVE-2023-52353 7.5 HighJanuary 21, 2024
• arm mbed tls, fedoraproject fedora, mbed mbedtls +2 more Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. CVE-2023-43615 Fix available 7.5 HighOctober 7, 2023
• arm mbed tls Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum... CVE-2021-36647 Fix available 4.7 MediumJanuary 17, 2023
• arm mbed tls, fedoraproject fedora +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap... CVE-2022-46393 Fix available 9.8 CriticalDecember 15, 2022
• arm mbed tls, fedoraproject fedora +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access... CVE-2022-46392 Fix available 5.3 MediumDecember 15, 2022
• arm mbed tls, debian linux +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,... CVE-2022-35409 Fix available 9.1 CriticalJuly 15, 2022
• arm mbed tls, debian linux +1 more A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the... CVE-2021-43666 Fix available 7.5 HighMarch 24, 2022
• arm mbed tls, fedoraproject fedora +1 more In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption... CVE-2021-45451 Fix available 7.5 HighDecember 21, 2021
• arm mbed tls, debian linux +1 more Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by... CVE-2021-44732 Fix available 9.8 CriticalDecember 20, 2021
• arm mbed tls, debian linux, siemens logo\! cmr2020 firmware +5 more +7 more An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS).... CVE-2020-36478 Fix available 7.5 HighAugust 23, 2021
• arm mbed tls An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when... CVE-2020-36477 Fix available 5.9 MediumAugust 23, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS).... CVE-2020-36476 Fix available 7.5 HighAugust 23, 2021
• arm mbed tls, debian linux, siemens logo\! cmr2020 firmware +5 more +7 more An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS).... CVE-2020-36475 Fix available 7.5 HighAugust 23, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer... CVE-2020-36426 Fix available 7.5 HighJuly 19, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check... CVE-2020-36425 Fix available 5.3 MediumJuly 19, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for... CVE-2020-36424 Fix available 4.7 MediumJuly 19, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext... CVE-2020-36423 Fix available 7.5 HighJuly 19, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC... CVE-2020-36422 Fix available 5.3 MediumJuly 19, 2021
• arm mbed tls, debian linux +1 more An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular... CVE-2020-36421 Fix available 5.3 MediumJuly 19, 2021
• arm mbed tls, debian linux, fedoraproject fedora +2 more In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding... CVE-2021-24119 Fix available 4.9 MediumJuly 14, 2021
• arm mbed tls, debian linux, fedoraproject fedora +2 more A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted... CVE-2020-16150 Fix available 5.5 MediumSeptember 2, 2020
• arm mbed tls, debian linux, fedoraproject fedora +2 more An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that... CVE-2020-10932 Fix available 4.7 MediumApril 15, 2020
• arm mbed tls, mbed crypto, debian linux +1 more +3 more Arm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)... CVE-2020-10941 Fix available 5.9 MediumMarch 24, 2020
• arm mbed crypto, mbed tls, debian linux +1 more +3 more The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1... CVE-2019-18222 Fix available 4.7 MediumJanuary 23, 2020
• arm mbed crypto, mbed tls, debian linux +1 more +3 more Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,... CVE-2019-16910 Fix available 5.3 MediumSeptember 26, 2019
• arm mbed tls Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker... CVE-2018-19608 Fix available 4.7 MediumDecember 5, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial... CVE-2018-0498 Fix available 4.7 MediumJuly 28, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve... CVE-2018-0497 Fix available 5.9 MediumJuly 28, 2018
• arm mbed tls ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed... CVE-2018-1000520 7.5 HighJune 26, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in... CVE-2018-9989 Fix available 7.5 HighApril 10, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in... CVE-2018-9988 Fix available 7.5 HighApril 10, 2018
• arm mbed tls, debian linux +1 more In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK... CVE-2017-18187 Fix available 9.8 CriticalFebruary 14, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension... CVE-2018-0488 Fix available 9.8 CriticalFebruary 13, 2018
• Show olderLoading…