MT
Product
Mbed Tls
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 18Medium 24Low 0
Watch
Add Mbed Tls to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34871 | 6.7 | Apr 1 | An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0 Affected: before 3.6.6 |
| CVE-2025-54764 | 6.2 | Oct 20 | Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd Affected: before 3.6.5 |
| CVE-2020-36477 | 5.9 | Aug 23 | An issue was discovered in Mbed TLS before 2.24.0 Affected: before 2.24.0 |
| CVE-2020-10941 | 5.9 | Mar 24 | Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import Affected: before 2.16.5 |
| CVE-2018-0497 | 5.9 | Jul 28 | ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based… Affected: before 2.1.14; 2.2.0 before 2.7.5; 2.8.0 before 2.12.0 |
| CVE-2024-23170 | 5.5 | Jan 31 | An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2 Affected: 2.0.0 before 2.28.7 |
| CVE-2020-16150 | 5.5 | Sep 2 | A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information Affected: before 2.7.17; 2.8.0 before 2.16.8; 2.17.0 before 2.24.0 |
| CVE-2025-27809 | 5.4 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls… Affected: before 2.28.10 |
| CVE-2025-59438 | 5.3 | Oct 21 | Mbed TLS through 3.6.4 has an Observable Timing Discrepancy Affected: before 3.6.5 |
| CVE-2022-46392 | 5.3 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 Affected: before 2.28.2 |
| CVE-2020-36425 | 5.3 | Jul 19 | An issue was discovered in Arm Mbed TLS before 2.24.0 Affected: before 2.7.17; 2.8.0 before 2.16.8; 2.17.0 before 2.24.0 |
| CVE-2020-36422 | 5.3 | Jul 19 | An issue was discovered in Arm Mbed TLS before 2.23.0 Affected: before 2.16.7; 2.17.0 before 2.23.0 |
| CVE-2020-36421 | 5.3 | Jul 19 | An issue was discovered in Arm Mbed TLS before 2.23.0 Affected: before 2.16.7; 2.17.0 before 2.23.0 |
| CVE-2019-16910 | 5.3 | Sep 26 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker… Affected: before 2.7.12; 2.8.0 before 2.16.3 |
| CVE-2025-66442 | 5.1 | Apr 1 | In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature Affected: through 4.0.0 |
| CVE-2021-24119 | 4.9 | Jul 14 | In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA… Affected: before 2.26.0 |
| CVE-2025-52497 | 4.8 | Jul 4 | Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions, via untrusted PEM input Affected: before 3.6.4 |
| CVE-2025-27810 | 4.8 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message,… Affected: before 2.28.10 |
| CVE-2021-36647 | 4.7 | Jan 17 | Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows… Affected: before 2.16.11; 2.17.0 before 2.27.0 |
| CVE-2020-36424 | 4.7 | Jul 19 | An issue was discovered in Arm Mbed TLS before 2.24.0 Affected: before 2.7.17; 2.8.0 before 2.16.8; 2.17.0 before 2.24.0 |
| CVE-2020-10932 | 4.7 | Apr 15 | An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15 Affected: 2.7.0 before 2.7.15 |
| CVE-2019-18222 | 4.7 | Jan 23 | The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a… Affected: before 2.7.13; 2.8.0 before 2.16.4; 2.17.0 before 2.20.0 |
| CVE-2018-19608 | 4.7 | Dec 5 | Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E)… Affected: 2.1.0 before 2.1.17; 2.7.0 before 2.7.8 |
| CVE-2018-0498 | 4.7 | Jul 28 | ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel… Affected: before 2.1.14; 2.2.0 before 2.7.5; 2.8.0 before 2.12.0 |
Showing 24