CVE-2026-34877

Mô tả

Tham khảo

• mbed-tls.readthedocs.io/en/latest/security-advisories · Vendor Advisory
• mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-serialized-data · Vendor Advisory

Lỗ hổng khác của mbed tls

• CVE-2026-34872NGHIÊM TRỌNG 9.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH du…
• CVE-2025-66442TRUNG BÌNH 5.1In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's sele…
• CVE-2026-34871TRUNG BÌNH 6.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseud…
• CVE-2026-25835CAO 7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
• CVE-2025-59438TRUNG BÌNH 5.3Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.