JLSEC-2026-466 Mbed TLS peer can force the FFDH shared secret into a small set of values

🗓️ 07 May 2026 16:17:33Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Mbed TLS may force Fdiffie-hellman shared secret into a small set due to input validation flaw.

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2026-34872	1 Apr 202600:00	–	attackerkb
Circl	CVE-2026-34872	1 Apr 202620:43	–	circl
CNNVD	Mbed TLS 安全漏洞	1 Apr 202600:00	–	cnnvd
CVE	CVE-2026-34872	1 Apr 202600:00	–	cve
Cvelist	CVE-2026-34872	1 Apr 202600:00	–	cvelist
FreeBSD	Mbed TLS -- vulnerabilities	31 Mar 202600:00	–	freebsd
Debian CVE	CVE-2026-34872	1 Apr 202600:00	–	debiancve
EUVD	EUVD-2026-18021	1 Apr 202621:30	–	euvd
Tenable Nessus	FreeBSD : Mbed TLS -- vulnerabilities (d77bd2f5-34f0-11f1-bc6d-3c7c3fba4204)	11 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-34872	3 Apr 202600:00	–	nessus

Source	Link
github	www.github.com/advisories/GHSA-347r-37hj-5jc9
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories/
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ffdh-peerkey-checks
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ffdh-peerkey-checks/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34872

07 May 2026 16:47Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.1

EPSS0.00204

mbed tls finite field diffie-hellman input validation shared secret contributory behavior security vulnerability protocol impact affected versions