CVE-2024-28960

2024-03-2900:00:00

mitre

github.com

mbed tls

psa crypto api

memory mishandle

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mbed:mbedtls:2.18.0:*:*:*:*:*:*:*"
    ],
    "vendor": "mbed",
    "product": "mbedtls",
    "versions": [
      {
        "status": "affected",
        "version": "2.18.0",
        "lessThan": "2.28.8",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mbed:mbedtls:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mbed",
    "product": "mbedtls",
    "versions": [
      {
        "status": "affected",
        "version": "3.x",
        "lessThan": "3.6.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mbed:mbedcrypto:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mbed",
    "product": "mbedcrypto",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ],
    "defaultStatus": "unknown"
  }
]