MT
Product
Mbed Tls
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 18Medium 24Low 0
Watch
Add Mbed Tls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34877 | 9.8 | Apr 2 | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0 Affected: 2.19.0 before 3.6.6 |
| CVE-2025-47917 | 9.8 | Jul 20 | Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation Affected: before 3.6.4 |
| CVE-2022-46393 | 9.8 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 Affected: before 2.28.2 |
| CVE-2021-44732 | 9.8 | Dec 20 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure Affected: before 2.16.12; 2.17.0 before 2.28.0 |
| CVE-2017-18187 | 9.8 | Feb 14 | In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in… Affected: before 2.7.0 |
| CVE-2018-0488 | 9.8 | Feb 13 | ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a… Affected: 1.3.0 before 1.3.22; 2.1.0 before 2.1.10; 2.2.0 before 2.7.0 |
| CVE-2018-0487 | 9.8 | Feb 13 | ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted… Affected: 1.3.8 before 1.3.22; 2.1.0 before 2.1.10; 2.2.0 before 2.7.0 |
| CVE-2026-34872 | 9.1 | Apr 1 | An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0 Affected: before 3.6.6 |
| CVE-2022-35409 | 9.1 | Jul 15 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0 Affected: before 2.28.1 |
Showing 9