Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-229

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_bu...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Affected Packages
MbedTLS_jll < 2.28.1010+0
Aliases / Upstream
CVE-2025-52497

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtlspemreadbuffer and two mbedtlspk_parse functions, via untrusted PEM input.

References