CVE-2026-34875

CVE-2026-34875 concerns a buffer overflow in the public key export path for FFDH keys in Mbed TLS up to version 3.6.5 and TF-PSA-Crypto 1.0.0. The evidence in the connected documents confirms the root cause as a buffer overflow during public key export, affecting the FFDH key handling. No exploit...

CVE-2026-34873

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session...

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed TLS. There is a security vulnerability in Mbed TLS, which stems from a predictable seed present in the pseudo-random number generator...

PT-2026-29585

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.6 TF-PSA-Crypto versions prior to 1.1.0 Description The software uses seeds incorrectly within a Pseudo-Random Number Generator PRNG. This can lead to predictable random number generation. Recommendations Update...

CVE-2026-25835

CVE-2026-25835 affects Mbed TLS prior to 3.6.6 and TF-PSA-Crypto prior to 1.1.0 due to seeds being misused in a PRNG. Public-article references in connected advisories show remediation via updating Mbed TLS to 3.6.6 (e.g., SUSE-SU-2026:1952-1 and Fedora advisories). The disclosed impact per the C...

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed. Versions of Mbed TLS from 3.5.0 to 4.0.0 contain security vulnerabilities, which stem from the potential for client impersonation when restoring TLS 1.3 sessions...

PT-2026-29582

Name of the Vulnerable Software and Affected Versions Mbed TLS versions through 3.6.5 TF-PSA-Crypto version 1.0.0 Description A buffer overflow can occur during the public key export process for FFDH keys. Recommendations Update Mbed TLS to a version later than 3.6.5. Update TF-PSA-Crypto to a...

CVE-2026-25834

CVE-2026-25834 is disclosed in the OpenSUSE/SUSE advisories linked to ovmf and is tied to mbed TLS 3.6.x. The OpenSUSE OpenSUSE-SU-2026:20875-1 advisory describes CVE-2026-25834 as: the client accepts a signature algorithm chosen by the server even if it was not advertised in the client hello. Th...

CVE-2026-34875

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys...

CVE-2026-34871

CVE-2026-34871 affects Mbed TLS before 3.6.6 and 4.x before 4.1.0, due to a Predictable Seed in the PRNG. Evidence from multiple advisories notes remediation by upgrading to 3.6.6 (or newer) where getrandom is unavailable and /dev/urandom is used as fallback. Impact on confidentiality and integri...

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed TLS. There are security vulnerabilities in Mbed TLS versions 3.5.x, 3.6.5, and earlier, as well as in TF-PSA-Crypto version 1.0. These vulnerabilities stem from improper input validation in...

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed. Versions 3.3.0 to 3.6.5, as well as 4.0.0, of Mbed TLS contain security vulnerabilities due to a vulnerability that allows for algorithm downgrading...

PT-2026-29589

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.5.x and 3.6.x through 3.6.5 TF-PSA-Crypto version 1.0 Description A flaw exists due to improper input validation in Finite-Field Diffie-Hellman FFDH, leading to a lack of contributory behavior. An attacker can manipulate th...

CVE-2026-34874

Mbed TLS versions affected: up to 3.6.5 and 4.x up to 4.0.0. The issue is a NULL pointer dereference in distinguished name parsing that can allow writing to address 0. This is a concrete vulnerability detail (affected component and root cause) and is described in both the CVE records and CVE List...

CVE-2026-25835

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator PRNG...

PT-2026-29584

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.5.0 through 3.6.5 Description A buffer overflow exists in the x509 inet pton ipv6 function. This issue was addressed in versions 3.6.6 and 4.1.0. Recommendations Update to version 3.6.6 or 4.1.0...

CVE-2026-34873

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session...

Mbed TLS 安全漏洞

Mbed TLS is an open-source, portable, easy-to-use, readable, and flexible SSL library developed by Mbed TLS. Versions 3.5.0 to 3.6.5 of Mbed TLS contain security vulnerabilities, which stem from a buffer overflow in the x509inetptonipv6 function...

CVE-2026-34871

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator PRNG...

CVE-2026-34875

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys...