CVE-2026-34872

Vulnerabilities were identified in Mbed TLS versions 3.5.x and 3.6.x (through 3.6.5 ), as well as TF-PSA-Crypto 1.0 . The root cause is improper input validation in Finite-Field Diffie-Hellman (FFDH) , leading to a lack of contributory behavior . This allows a peer or an active network attacker (...

CVE-2025-66442

The Mbed TLS library through version 4.0.0 and TF-PSA-Crypto through version 1.0.0 are vulnerable to a compiler-induced timing side channel . This issue specifically affects RSA and CBC/ECB decryption operations and only occurs when using the LLVM select-optimize feature. No specific exploit deta...