CVE-2026-25834

Description

References

• mbed-tls.readthedocs.io/en/latest/security-advisories · Vendor Advisory
• mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-sigalg-injection · Vendor Advisory

Autres vulnérabilités de mbed tls

• CVE-2026-34877CRITIQUE 9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or s…
• CVE-2026-34876ÉLEVÉE 7.5An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows at…
• CVE-2026-34873CRITIQUE 9.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.
• CVE-2026-34874ÉLEVÉE 7.5An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing t…
• CVE-2026-25835ÉLEVÉE 7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).