MB
Product
mbedtls
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 6Low 1
Watch
Add mbedtls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28960 | 8.2 | Mar 29 | An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto Affected: 2.18.0 before 2.28.8; 3.x before 3.6.0 |
| CVE-2025-52496 | 7.8 | Jul 4 | Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur Affected: before 3.6.4 |
| CVE-2025-48965 | 7.5 | Jul 20 | Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.len greater than zero Affected: before 3.6.4 |
Showing 3