CVE-2025-47917

Exploit CVE-2025-47917 Use-After-Free en mbedTLS Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerabilidad : Use-After-Free UAF en el análisis de nombres de mbedTLS 3.6.4 Descripción Este repositorio contiene un exploit que apunta a una vulnerabilidad Use-After-Free en la...

ROOT-OS-DEBIAN-12-CVE-2026-34875 CVE-2026-34875 in mbedtls - Patched by Root

Root has patched CVE-2026-34875 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-52496 CVE-2025-52496 in mbedtls - Patched by Root

Root has patched CVE-2025-52496 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34872 CVE-2026-34872 in mbedtls - Patched by Root

Root has patched CVE-2026-34872 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-28960 CVE-2024-28960 in mbedtls - Patched by Root

Root has patched CVE-2024-28960 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-47917 CVE-2025-47917 in mbedtls - Patched by Root

Root has patched CVE-2025-47917 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-52497 CVE-2025-52497 in mbedtls - Patched by Root

Root has patched CVE-2025-52497 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-59438 CVE-2025-59438 in mbedtls - Patched by Root

Root has patched CVE-2025-59438 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-27810 CVE-2025-27810 in mbedtls - Patched by Root

Root has patched CVE-2025-27810 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-23170 CVE-2024-23170 in mbedtls - Patched by Root

Root has patched CVE-2024-23170 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-27809 CVE-2025-27809 in mbedtls - Patched by Root

Root has patched CVE-2025-27809 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34873 CVE-2026-34873 in mbedtls - Patched by Root

Root has patched CVE-2026-34873 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-23775 CVE-2024-23775 in mbedtls - Patched by Root

Root has patched CVE-2024-23775 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-48965 CVE-2025-48965 in mbedtls - Patched by Root

Root has patched CVE-2025-48965 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Mbed TLS before version 2.24.0 and before versions 2.16.8 LTS and 2.7.17 LTS. There is a lack of zeroization of plaintext buffers in mbedtlssslread, which is necessary to erase unused application data from memory...

Astra Linux – Vulnerability in mbedtls

Before version 2.16.5 of Arm Mbed TLS, attackers could obtain sensitive information an RSA private key by monitoring cache usage during an import process...

Astra Linux – Vulnerability in mbedtls

The use of a broken or risky cryptographic algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS for all versions prior to 3.0.0, 2.27.0, or 2.16.11 allows attackers with access to precise timing and memory access information typically from an untrusted operating system attacking a...

Astra Linux – Vulnerability in mbedtls

Mbed TLS versions before 3.0.1 have a double-free error under certain out-of-memory conditions, as demonstrated by a failure in the mbedtlssslsetsession function...

CVE-2026-63650

A flaw was found in OpenVPN when using mbedTLS. A remote authenticated user could be misidentified due to the software ignoring the configured X.509 username identity lookup field. This could lead to incorrect user authentication and potential security bypasses...