Mbed mbedtls vulnerabilities

Newest CVEs

• CVE-2025-49087

  In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7…

  Mbed · mbedtls

  Medium4.0
• CVE-2025-48965

  Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.len greater…

  Mbed · mbedtls

  Medium4.0
• CVE-2025-47917

  Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function…

  Mbed · mbedtls

  High8.9
• CVE-2025-52497

  Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions, via untrusted PEM…

  Mbed · mbedtls

  Medium4.8
• CVE-2025-52496

  Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a…

  Mbed · mbedtls

  High7.8
• CVE-2025-49601

  In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a…

  Mbed · mbedtls

  Medium4.8
• CVE-2025-49600

  In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS…

  Mbed · mbedtls

  Medium4.9
• CVE-2025-27810

  Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS…

  Mbed · mbedtls

  Medium5.4
• CVE-2025-27809

  Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client…

  Mbed · mbedtls

  Medium5.4