MB
Vendor
Mbed
22
CVEs
0
On KEV
0
New 30D
Products
MB9.8
mbedtls
Mbed
13 CVEs0 on KEV0 new
MB9.8
Mbed
Mbed
8 CVEs0 on KEV0 new
MB8.2
Mbedcrypto
Mbed
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-47917 | MB mbedtls Mbed | 9.8 | Jul 20 | Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation |
| CVE-2025-48965 | MB mbedtls Mbed | 7.5 | Jul 20 | Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.len greater than zero |
| CVE-2025-49087 | MB mbedtls Mbed | 3.7 | Jul 20 | In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used |
| CVE-2025-49600 | MB mbedtls Mbed | 4.9 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS (Leighton-Micali… |
| CVE-2025-52497 | MB mbedtls Mbed | 4.8 | Jul 4 | Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions, via untrusted PEM input |
| CVE-2025-49601 | MB mbedtls Mbed | 6.5 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a possible… |
| CVE-2025-52496 | MB mbedtls Mbed | 7.8 | Jul 4 | Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur |
| CVE-2025-27810 | MB mbedtls Mbed | 4.8 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message,… |
| CVE-2025-27809 | MB mbedtls Mbed | 5.4 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls… |
| CVE-2024-48984 | MB Mbed Mbed | 9.8 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-48981 | MB Mbed Mbed | 7.5 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-48983 | MB Mbed Mbed | 7.5 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-48985 | MB Mbed Mbed | 7.5 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-48982 | MB Mbed Mbed | 7.5 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-48986 | MB Mbed Mbed | 7.5 | Nov 20 | An issue was discovered in MBed OS 6.16.0 |
| CVE-2024-49195 | MB Mbedtls Mbed | 9.8 | Oct 15 | Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair |
| CVE-2024-45158 | MB Mbedtls Mbed | 9.8 | Sep 5 | An issue was discovered in Mbed TLS 3.6 before 3.6.1 |
| CVE-2024-28755 | MB Mbedtls Mbed | 6.5 | Apr 3 | An issue was discovered in Mbed TLS 3.5.x before 3.6.0 |
| CVE-2024-28960 | MB Mbedcrypto Mbed | 8.2 | Mar 29 | An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto |
| CVE-2019-17211 | MB Mbed Mbed | 9.8 | Nov 5 | An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0 |
| CVE-2019-17212 | MB Mbed Mbed | 9.8 | Nov 5 | Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0 |