MT
Product
Mbed TLS
43
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 13Medium 14Low 3
Watch
Add Mbed TLS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34877 | 9.8 | Apr 2 | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0 Affected: 4.0.0 |
| CVE-2026-34875 | 9.8 | Apr 1 | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0 Affected: 3.5.0 before 3.6.6 |
| CVE-2024-49195 | 9.8 | Oct 15 | Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair Affected: 3.5.0 before 3.6.2 |
| CVE-2024-45158 | 9.8 | Sep 5 | An issue was discovered in Mbed TLS 3.6 before 3.6.1 Affected: 3.6.0 |
| CVE-2024-45159 | 9.8 | Sep 5 | An issue was discovered in Mbed TLS 3.x before 3.6.1 Affected: 3.2.0 before 3.6.1 |
| CVE-2023-45199 | 9.8 | Oct 7 | Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution Affected: 3.2.0 before 3.5.0 |
| CVE-2022-46393 | 9.8 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 Affected: 3.0.0 before 3.3.0 |
| CVE-2021-44732 | 9.8 | Dec 20 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure Affected: 3.0.0; 3.0.0 |
| CVE-2026-34873 | 9.1 | Apr 1 | An issue was discovered in Mbed TLS 3.5.0 through 4.0.0 Affected: 3.5.0 before 3.6.6; 4.0.0 before 4.1.0 |
| CVE-2024-30166 | 9.1 | Apr 3 | In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256… Affected: 3.3.0 before 3.6.0 |
| CVE-2022-35409 | 9.1 | Jul 15 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0 Affected: 3.0.0 before 3.2.0 |
Showing 11