| Package | Affected versions | Patched versions |
|---|---|---|
| mbed crypto | ≤ 3.1.0 | |
| mbed tls | ≥ 2.1.8, < 2.28.8 | 2.28.8 |
| mbed tls | ≥ 3.0.0, < 3.6.0 | 3.6.0 |
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free