CVE-2024-49195

Description

References

• mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1 · Vendor Advisory
• mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories · Vendor Advisory

mbed tls의 다른 취약점

• CVE-2026-34877심각 9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or s…
• CVE-2026-34876높음 7.5An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows at…
• CVE-2026-34873심각 9.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.
• CVE-2026-34874높음 7.5An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing t…
• CVE-2026-25835높음 7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).