MbedTLS_jll
JLSEC-2026-467Critical 9.8UpstreamMbed TLS serialized session data is not cryptographically protectedJLSEC-2026-466Critical 9.1UpstreamMbed TLS peer can force the FFDH shared secret into a small set of valuesJLSEC-2026-463Medium 5.1UpstreamMbed TLS timing side channel in RSA and CBC/ECB decryptionJLSEC-2026-465Medium 6.7UpstreamMbed TLS may use a low entropy PRNG seedJLSEC-2026-464High 7.7UpstreamMbed TLS might use cloned PSA random generator statesJLSEC-2025-233Medium 5.3UpstreamPadding oracle through timing of cipher error reportingJLSEC-2025-232Medium 6.2UpstreamSide channel in RSA key generation and operations (SSBleed, M-Step)JLSEC-2025-231Critical 9.8UpstreamMbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that …JLSEC-2025-230High 7.5UpstreamMbed TLS before 3.6.4 has a NULL pointer dereference because `mbedtls_asn1_store_named_da…JLSEC-2025-229Medium 4.8UpstreamMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in...JLSEC-2025-228High 7.8UpstreamMbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimiz…JLSEC-2025-187Medium 4.8UpstreamMbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation o…JLSEC-2025-227Medium 5.4UpstreamMbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that ha…JLSEC-2025-226Medium 5.1UpstreamAn issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user…JLSEC-2025-225High 8.2UpstreamAn issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.…JLSEC-2025-224High 7.5UpstreamInteger Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows…JLSEC-2025-223Medium 5.5UpstreamAn issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2JLSEC-2025-222High 7.5UpstreamMbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.JLSEC-2025-221Medium 4.7UpstreamUse of a Broken or Risky Cryptographic Algorithm in the function `mbedtls_mpi_exp_mod()` …JLSEC-2025-220Critical 9.8UpstreamAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0JLSEC-2025-219Medium 5.3UpstreamAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0JLSEC-2025-218Critical 9.1UpstreamAn issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0JLSEC-2025-217High 7.5UpstreamA Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the...JLSEC-2025-216High 7.5UpstreamIn Mbed TLS before 3.1.0, `psa_aead_generate_nonce` allows policy bypass or oracle-based …JLSEC-2025-215High 7.5UpstreamIn Mbed TLS before 2.28.0 and 3.x before 3.1.0, `psa_cipher_generate_iv` and `psa_cipher_…JLSEC-2025-214Critical 9.8UpstreamMbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstra…JLSEC-2025-213High 7.5UpstreamAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.1…JLSEC-2025-212Medium 5.9UpstreamAn issue was discovered in Mbed TLS before 2.24.0JLSEC-2025-211High 7.5UpstreamAn issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.1…JLSEC-2025-210High 7.5UpstreamAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.1…JLSEC-2025-209High 7.5UpstreamAn issue was discovered in Arm Mbed TLS before 2.24.0JLSEC-2025-208Medium 5.3UpstreamAn issue was discovered in Arm Mbed TLS before 2.24.0JLSEC-2025-207Medium 4.7UpstreamAn issue was discovered in Arm Mbed TLS before 2.24.0JLSEC-2025-206High 7.5UpstreamAn issue was discovered in Arm Mbed TLS before 2.23.0JLSEC-2025-205Medium 5.3UpstreamAn issue was discovered in Arm Mbed TLS before 2.23.0JLSEC-2025-204Medium 5.3UpstreamAn issue was discovered in Arm Mbed TLS before 2.23.0JLSEC-2025-203Medium 4.9UpstreamIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file deco…JLSEC-2025-202Medium 5.5UpstreamA Lucky 13 timing side channel in `mbedtls_ssl_decrypt_buf` in `library/ssl_msg.c` in Tru…JLSEC-2025-201Medium 4.7UpstreamAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15JLSEC-2025-200Medium 5.9UpstreamArm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA priva…JLSEC-2025-199Medium 4.7UpstreamThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through…JLSEC-2025-198Medium 5.3UpstreamArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is …