CVE-2026-34876

An out-of-bounds read vulnerability exists in Mbed TLS versions 3.x before 3.6.6 within the mbedtls_ccm_finish() function in library/ccm.c. The root cause is a lack of validation for the tag_len parameter against the internal 16-byte authentication buffer. Attackers can exploit this by invoking t...