Trustedfirmware Mbed Tls vulnerabilities

• arm mbed tls An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.... CVE-2026-34877 Fix available 9.8 CriticalApril 2, 2026
• trustedfirmware mbed tls An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in... CVE-2026-34876 Fix available 7.5 HighApril 2, 2026
• trustedfirmware mbed tls, tf-psa-crypto +1 more An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can... CVE-2026-34875 Fix available 9.8 CriticalApril 1, 2026
• trustedfirmware mbed tls An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer... CVE-2026-34874 Fix available 7.5 HighApril 1, 2026
• trustedfirmware mbed tls An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while... CVE-2026-34873 Fix available 9.1 CriticalApril 1, 2026
• arm mbed tls, trustedfirmware tf-psa-crypto +1 more Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number... CVE-2026-25835 Fix available 7.7 HighApril 1, 2026
• trustedfirmware mbed tls Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. CVE-2026-25834 Fix available 6.5 MediumApril 1, 2026
• trustedfirmware mbed tls Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6... CVE-2026-25833 Fix available 7.5 HighApril 1, 2026
• trustedfirmware mbed tls, mbed mbedtls +1 more In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding... CVE-2025-49087 Fix available 4.0 MediumJuly 20, 2025
• mbed mbedtls, trustedfirmware mbed tls +1 more In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer... CVE-2025-49601 Fix available 4.8 MediumJuly 4, 2025
• mbed mbedtls, trustedfirmware mbed tls +1 more In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash... CVE-2025-49600 Fix available 4.9 MediumJuly 4, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... CVE-2025-27810 Fix available 5.4 MediumMarch 25, 2025
• arm mbed tls, mbed mbedtls +1 more Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... CVE-2025-27809 Fix available 5.4 MediumMarch 25, 2025
• trustedfirmware mbed tls, mbed mbedtls +1 more Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque... CVE-2024-49195 Fix available 9.8 CriticalOctober 15, 2024
• trustedfirmware mbed tls An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables... CVE-2024-45159 Fix available 9.8 CriticalSeptember 5, 2024
• mbed mbedtls, trustedfirmware mbed tls +1 more An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in... CVE-2024-45158 Fix available 9.8 CriticalSeptember 5, 2024
• trustedfirmware mbed tls An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user... CVE-2024-45157 Fix available 5.1 MediumSeptember 3, 2024
• arm mbed tls In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure... CVE-2024-30166 9.1 CriticalApril 3, 2024
• trustedfirmware mbed tls An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the... CVE-2024-28836 5.4 MediumApril 3, 2024
• mbed mbedtls, trustedfirmware mbed tls +1 more An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the... CVE-2024-28755 Fix available 6.5 MediumApril 3, 2024
• arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 more An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... CVE-2024-28960 Fix available 8.2 HighMarch 29, 2024
• arm mbed tls Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... CVE-2024-23775 Fix available 7.5 HighJanuary 31, 2024
• arm mbed tls An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... CVE-2024-23170 Fix available 5.5 MediumJanuary 31, 2024
• trustedfirmware mbed tls An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends... CVE-2024-23744 7.5 HighJanuary 21, 2024
• trustedfirmware mbed tls, mbed mbedtls +1 more Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code... CVE-2023-45199 Fix available 9.8 CriticalOctober 7, 2023
• arm mbed tls, fedoraproject fedora, mbed mbedtls +2 more Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. CVE-2023-43615 Fix available 7.5 HighOctober 7, 2023
• arm mbed tls Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum... CVE-2021-36647 Fix available 4.7 MediumJanuary 17, 2023
• arm mbed tls, fedoraproject fedora +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap... CVE-2022-46393 Fix available 9.8 CriticalDecember 15, 2022
• arm mbed tls, fedoraproject fedora +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access... CVE-2022-46392 Fix available 5.3 MediumDecember 15, 2022
• arm mbed tls, debian linux +1 more An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,... CVE-2022-35409 Fix available 9.1 CriticalJuly 15, 2022
• trustedfirmware mbed tls, fedoraproject fedora +1 more In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt... CVE-2021-45450 Fix available 7.5 HighDecember 21, 2021
• arm mbed tls, debian linux +1 more Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by... CVE-2021-44732 Fix available 9.8 CriticalDecember 20, 2021
• arm mbed tls, debian linux, fedoraproject fedora +2 more An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that... CVE-2020-10932 Fix available 4.7 MediumApril 15, 2020
• arm mbed crypto, mbed tls, debian linux +1 more +3 more Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,... CVE-2019-16910 Fix available 5.3 MediumSeptember 26, 2019
• arm mbed tls Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker... CVE-2018-19608 Fix available 4.7 MediumDecember 5, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in... CVE-2018-9989 Fix available 7.5 HighApril 10, 2018
• arm mbed tls, debian linux +1 more ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in... CVE-2018-9988 Fix available 7.5 HighApril 10, 2018
• arm mbed tls ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows... CVE-2017-14032 Fix available 8.1 HighAugust 30, 2017
• arm mbed tls An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code... CVE-2017-2784 Fix available 8.1 HighMarch 22, 2017
• polarssl, trustedfirmware mbed tls, debian linux +2 more +4 more Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before... CVE-2015-8036 6.8 MediumNovember 2, 2015
• polarssl, trustedfirmware mbed tls, debian linux +3 more +5 more Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3... CVE-2015-5291 Fix available 6.8 MediumOctober 22, 2015