CVE-2026-25835

Mbed TLS versions prior to 3.6.6 and TF-PSA-Crypto versions prior to 1.1.0 are vulnerable to a security flaw involving the misuse of seeds in a Pseudo-Random Number Generator (PRNG) . This vulnerability can impact the cryptographic integrity of applications relying on these libraries for secure r...

CVE-2026-34875

A buffer overflow vulnerability exists in Mbed TLS (versions through 3.6.5) and TF-PSA-Crypto (version 1.0.0). The flaw occurs during the public key export process for FFDH keys . This vulnerability has been addressed in the libeverest-3.6.6-1.1 package on openSUSE Tumbleweed . While technical de...

CVE-2026-34871

A predictable seed in a Pseudo-Random Number Generator (PRNG) affects Mbed TLS (before 3.6.6 and 4.x before 4.1.0) and TF-PSA-Crypto (before 1.1.0). Specifically, on systems where getrandom() is unavailable, /dev/urandom is used as a fallback instead of /dev/random . The impact of this vulnerabil...