CVE-2025-47917

CVE-2025-47917 漏洞利用（mbedTLS 中的 Use-After-Free） 作者 : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 漏洞类型 : mbedTLS 3.6.4 名称解析中的 Use-After-Free（UAF） 描述 该仓库包含一个针对 mbedTLS 库中 mbedtlsx509stringtonames 名称解析函数内 Use-After-Free 漏洞的利用程序。成功利用该漏洞可通过劫持已释放的堆元数据并将控制流重定向到注入的 shellcode，实现以 root 权限执行任意代码...

CVE-2026-15924 Use-after-free / double-free from unsynchronized concurrent access to the TLS client session cache in Zephyr sockets

Zephyr's TLS socket layer in subsys/net/lib/sockets/socketstls.c keeps a single process-global array, clientcache, of cached client sessions that is shared by every TLS socket context. The functions that mutate and read it — tlssessionsave, tlssessionget, tlssessioncachereset, and the settings...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

Astra Linux – Vulnerability in mbedtls

Mbed TLS versions before 3.0.1 have a double-free error under certain out-of-memory conditions, as demonstrated by a failure in the mbedtlssslsetsession function...

MGASA-2026-0375 Updated mbedtls packages fix security vulnerabilities

TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. CVE-2026-25832 Possible buffer overflow in mbedtlsecdhcalcsecret. CVE-2026-35336 X.509 CA bit forgery via invalid basicConstraints extension. CVE-2026-49300 Use-after-free in mbedtlspkcs7free when reusing a PKCS7 context...

ROOT-OS-DEBIAN-12-CVE-2025-52497 CVE-2025-52497 in mbedtls - Patched by Root

Root has patched CVE-2025-52497 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-28960 CVE-2024-28960 in mbedtls - Patched by Root

Root has patched CVE-2024-28960 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-47917 CVE-2025-47917 in mbedtls - Patched by Root

Root has patched CVE-2025-47917 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34872 CVE-2026-34872 in mbedtls - Patched by Root

Root has patched CVE-2026-34872 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34875 CVE-2026-34875 in mbedtls - Patched by Root

Root has patched CVE-2026-34875 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-52496 CVE-2025-52496 in mbedtls - Patched by Root

Root has patched CVE-2025-52496 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-27810 CVE-2025-27810 in mbedtls - Patched by Root

Root has patched CVE-2025-27810 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-59438 CVE-2025-59438 in mbedtls - Patched by Root

Root has patched CVE-2025-59438 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-48965 CVE-2025-48965 in mbedtls - Patched by Root

Root has patched CVE-2025-48965 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-27809 CVE-2025-27809 in mbedtls - Patched by Root

Root has patched CVE-2025-27809 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-23775 CVE-2024-23775 in mbedtls - Patched by Root

Root has patched CVE-2024-23775 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34873 CVE-2026-34873 in mbedtls - Patched by Root

Root has patched CVE-2026-34873 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-23170 CVE-2024-23170 in mbedtls - Patched by Root

Root has patched CVE-2024-23170 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in mbedtls

Before version 2.16.5 of Arm Mbed TLS, attackers could obtain sensitive information an RSA private key by monitoring cache usage during an import process...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Mbed TLS before version 2.24.0 and before versions 2.16.8 LTS and 2.7.17 LTS. There is a lack of zeroization of plaintext buffers in mbedtlssslread, which is necessary to erase unused application data from memory...