PT-2025-48529

Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtls x509 string to names takes a head argument that is documented as an output argument. The documentation does not suggest that the functi...