PT-2025-48507

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls x509 crl parse der has a buffer over-read of one byte...

PT-2025-48510

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name the cn argument of mbedtls x509 crt verify with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to...

The vulnerability of the mbedtls_x509_set_extension function in Mbed TLS software allows a attacker to trigger a service failure.

The vulnerability of the mbedtlsx509setextension function in Mbed TLS is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UBUNTU-CVE-2024-23775

Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service DoS via mbedtlsx509setextension...

Mbed TLS Security Vulnerability

Mbed TLS is an open source, portable, easy-to-use, readable and flexible SSL library. A security vulnerability exists in Mbed TLS versions 2.x through 2.28.7 and 3.x through 3.5.2, which stems from an integer overflow issue. An attacker could exploit this vulnerability to cause a denial of servic...