publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...

CVE-2026-87044

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044 Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044 Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044

The Mbed TLS crypto shim driver (located in drivers/crypto/crypto_mbedtls_shim.c) contains a memory leak vulnerability in the mbedtls_cbc() and mbedtls_aead() functions. When these functions encounter an error path after a successful setup of PSA multipart cipher or AEAD operations, they return d...

CLEANSTART-2024-UQ58761 exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1

CVE-2017-2784 affects multiple packages. An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1. See references for individual vulnerability details...

CLEANSTART-2024-VQ17554 ARM mbed TLS before 1

CVE-2017-14032 affects multiple packages. ARM mbed TLS before 1. See references for individual vulnerability details...

CLEANSTART-2024-WZ59231 ARM mbed TLS before 1

CVE-2018-0487 affects multiple packages. ARM mbed TLS before 1. See references for individual vulnerability details...

CLEANSTART-2024-YF11154 ARM mbed TLS before 1

CVE-2018-0488 affects multiple packages. ARM mbed TLS before 1. See references for individual vulnerability details...

CLEANSTART-2024-TU19523 ARM mbed TLS before 2

CVE-2018-0498 affects multiple packages. ARM mbed TLS before 2. See references for individual vulnerability details...

CLEANSTART-2024-XQ98859 Arm Mbed TLS before 2

CVE-2018-19608 affects multiple packages. Arm Mbed TLS before 2. See references for individual vulnerability details...

CLEANSTART-2024-WQ99407 issue was discovered in Arm Mbed TLS before 2

CVE-2020-10932 affects multiple packages. An issue was discovered in Arm Mbed TLS before 2. See references for individual vulnerability details...

CLEANSTART-2024-AL57729 issue was discovered in Mbed TLS 2

CVE-2024-28960 affects multiple packages. An issue was discovered in Mbed TLS 2. See references for individual vulnerability details...

PT-2026-126664

GoAhead 6.1.1 was supposed to fix CVE-2026-115884. Bitsight TRACE researchers found the depth-check bypass still works with LibreSSL's legacy verifier under specific configurations. Embedthis confirmed the incomplete fix. 👉 Read more: https://t.co/miBppERbql https://t.co/G2v4DZsAcF...

PT-2026-126663

Name of the Vulnerable Software and Affected Versions GoAhead versions 3.4.5 through 6.1.0 Description GoAhead is a small web server used in routers, printers, and industrial controllers. A flaw exists where the server loads the Certificate Revocation List CRL but fails to apply it. This allows...

Astra Linux – vulnerability in mbedtls

An issue was found in Mbed TLS prior to version 3.6.6, in versions 4.x prior to 4.1.0, and in TF-PSA-Crypto prior to version 1.1.0. There is a predictable seed within a pseudo-random number generator PRNG...

Astra Linux – vulnerability in mbedtls

An issue was found in Arm Mbed TLS prior to version 2.24.0. mbedtlsx509crlparseder contains a buffer over-read of one byte...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Arm Mbed TLS before version 2.23.0. A side channel allows the recovery of an ECC private key, which is related to functions such as mbedtlsecpcheckpubpriv, mbedtlspkparsekey, mbedtlspkparsekeyfile, mbedtlsecpmul, and mbedtlsecpmulrestartable...

Astra Linux – vulnerability in mbedtls

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password’s length is 0...

Astra Linux – vulnerability in mbedtls

An issue was found in Mbed TLS prior to version 2.25.0 as well as prior to version 2.16.9 LTS and version 2.7.18 LTS. In this context, a NULL algorithm parameter entry appears identical to an array containing REAL values with size zero; consequently, the certificate is deemed valid. However, if...