| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | < 3.6.4 | 3.6.4 |
Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free