| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | < 3.6.4 | 3.6.4 |
Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.len greater than zero.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free