Trustedfirmware Mbed Tls — known CVE vulnerabilities

Every CVE whose affected-product data names Trustedfirmware Mbed Tls, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (41)

• CVE-2024-45158 — CVSS 9.8 (critical): An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der()…
• CVE-2023-45199 — CVSS 9.8 (critical): Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.
• CVE-2026-34875 — CVSS 9.8 (critical): An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
• CVE-2026-34877 — CVSS 9.8 (critical): An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or…
• CVE-2024-49195 — CVSS 9.8 (critical): Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair
• CVE-2021-44732 — CVSS 9.8 (critical): Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
• CVE-2024-45159 — CVSS 9.8 (critical): An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the…
• CVE-2022-46393 — CVSS 9.8 (critical): An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based…
• CVE-2022-35409 — CVSS 9.1 (critical): An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an…
• CVE-2024-30166 — CVSS 9.1 (critical): In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack…
• CVE-2026-34873 — CVSS 9.1 (critical): An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.
• CVE-2024-28960 — CVSS 8.2 (high): An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API…
• CVE-2017-14032 — CVSS 8.1 (high): ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer…
• CVE-2017-2784 — CVSS 8.1 (high): An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before…
• CVE-2026-25835 — CVSS 7.7 (high): Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
• CVE-2023-43615 — CVSS 7.5 (high): Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
• CVE-2018-9988 — CVSS 7.5 (high): ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a…
• CVE-2018-9989 — CVSS 7.5 (high): ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash…
• CVE-2021-45450 — CVSS 7.5 (high): In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based…
• CVE-2024-23744 — CVSS 7.5 (high): An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
• CVE-2024-23775 — CVSS 7.5 (high): Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via…
• CVE-2026-25833 — CVSS 7.5 (high): Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function
• CVE-2026-34874 — CVSS 7.5 (high): An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing…
• CVE-2026-34876 — CVSS 7.5 (high): An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows…
• CVE-2015-8036 — CVSS 6.8 (medium): Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause…
• CVE-2015-5291 — CVSS 6.8 (medium): Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2…
• CVE-2026-25834 — CVSS 6.5 (medium): Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.
• CVE-2024-28755 — CVSS 6.5 (medium): An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the mbedtls_ssl_session_reset() API, the maximum…
• CVE-2024-23170 — CVSS 5.5 (medium): An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This…
• CVE-2025-27810 — CVSS 5.4 (medium): Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory…
• CVE-2025-27809 — CVSS 5.4 (medium): Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames…
• CVE-2024-28836 — CVSS 5.4 (medium): An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS…
• CVE-2022-46392 — CVSS 5.3 (medium): An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory…
• CVE-2019-16910 — CVSS 5.3 (medium): Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for…
• CVE-2024-45157 — CVSS 5.1 (medium): An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously…
• CVE-2025-49600 — CVSS 4.9 (medium): In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked…
• CVE-2025-49601 — CVSS 4.8 (medium): In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a…
• CVE-2020-10932 — CVSS 4.7 (medium): An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel…
• CVE-2018-19608 — CVSS 4.7 (medium): Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA…
• CVE-2021-36647 — CVSS 4.7 (medium): Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before…
• CVE-2025-49087 — CVSS 4.0 (medium): In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the…