Mbed Mbedtls vulnerabilities

• trustedfirmware mbed tls, mbed mbedtls +1 more In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding... CVE-2025-49087 Fix available 4.0 MediumJuly 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can... CVE-2025-48965 Fix available 4.0 MediumJuly 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are... CVE-2025-47917 Public exploitFix available 8.9 HighJuly 20, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in... CVE-2025-52497 Fix available 4.8 MediumJuly 4, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... CVE-2025-52496 Fix available 7.8 HighJuly 4, 2025
• mbed mbedtls, trustedfirmware mbed tls +1 more In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer... CVE-2025-49601 Fix available 4.8 MediumJuly 4, 2025
• mbed mbedtls, trustedfirmware mbed tls +1 more In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash... CVE-2025-49600 Fix available 4.9 MediumJuly 4, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... CVE-2025-27810 Fix available 5.4 MediumMarch 25, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... CVE-2025-27809 Fix available 5.4 MediumMarch 25, 2025
• trustedfirmware mbed tls, mbed mbedtls +1 more Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque... CVE-2024-49195 Fix available 9.8 CriticalOctober 15, 2024
• mbed mbedtls, trustedfirmware mbed tls +1 more An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in... CVE-2024-45158 Fix available 9.8 CriticalSeptember 5, 2024
• mbed mbedtls, trustedfirmware mbed tls +1 more An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the... CVE-2024-28755 Fix available 6.5 MediumApril 3, 2024
• arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 more An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... CVE-2024-28960 Fix available 8.2 HighMarch 29, 2024
• trustedfirmware mbed tls, mbed mbedtls +1 more Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code... CVE-2023-45199 Fix available 9.8 CriticalOctober 7, 2023
• arm mbed tls, fedoraproject fedora, mbed mbedtls +2 more Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. CVE-2023-43615 Fix available 7.5 HighOctober 7, 2023