CVE-2026-34876

An out-of-bounds read vulnerability exists in Mbed TLS 3.x versions prior to 3.6.6 within the mbedtls_ccm_finish() function located in library/ccm.c. The root cause is a missing validation of the tag_len parameter against the size of the internal 16-byte authentication buffer. This flaw allows at...