Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-49195

Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair

Published

2024-10-15T20:15:21.950

Last Modified

2025-05-06T18:01:24.893

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	arm	mbed_tls	< 3.6.2	Yes

References

https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/ Vendor Advisory ([email protected])
https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ Vendor Advisory ([email protected])