MT
Product
Mbed TLS
43
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 13Medium 14Low 3
Watch
Add Mbed TLS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25834 | 6.5 | Apr 1 | Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade Affected: 3.3.0 before 3.6.6; 4.0.0 |
| CVE-2025-49601 | 6.5 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a possible… Affected: 3.3.0 before 3.6.4 |
| CVE-2024-28755 | 6.5 | Apr 3 | An issue was discovered in Mbed TLS 3.5.x before 3.6.0 Affected: 3.5.0 through 3.6.0 |
| CVE-2024-23170 | 5.5 | Jan 31 | An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2 Affected: 3.0.0 before 3.5.2 |
| CVE-2025-27809 | 5.4 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls… Affected: 3.0.0 before 3.6.3 |
| CVE-2024-28836 | 5.4 | Apr 3 | An issue was discovered in Mbed TLS 3.5.x before 3.6.0 Affected: 3.5.0 before 3.6.0 |
| CVE-2022-46392 | 5.3 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 Affected: 3.0.0 before 3.3.0 |
| CVE-2019-16910 | 5.3 | Sep 26 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker… Affected: 2.17.0 before 2.19.0 |
| CVE-2024-45157 | 5.1 | Sep 5 | An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used Affected: 2.26.0 before 2.28.9; 3.2.0 before 3.6.1 |
| CVE-2025-49600 | 4.9 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS (Leighton-Micali… Affected: 3.3.0 before 3.6.4 |
| CVE-2025-27810 | 4.8 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message,… Affected: 3.0.0 before 3.6.3 |
| CVE-2021-36647 | 4.7 | Jan 17 | Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows… Affected: 2.28.0 before 3.0.0 |
| CVE-2020-10932 | 4.7 | Apr 15 | An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15 Affected: 2.16.0 before 2.16.6 |
| CVE-2018-19608 | 4.7 | Dec 5 | Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E)… Affected: 2.14.0 before 2.14.1 |
Showing 14