Known vulnerabilities in mbed TLS - page 2

Vendor: ARM
Software: mbed TLS
Software CPE: cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mbed TLS mbed TLS is affected by 55 known vulnerabilities: 6 high, 28 medium, 21 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113735 - Cryptographic Issues
CVE-2023-52353
CWE-310 Low
No
No
3.6.1 07.08.2025 SB2024090202
#VU112447 - Unchecked Return Value
CVE-2025-49600
CWE-252 Medium
No
No
3.6.4 07.07.2025 SB2025070782
SB2025070784
SB2025070785
and 1 more
#VU112446 - Out-of-bounds read
CVE-2025-49601
CWE-125 Medium
No
No
3.6.4 07.07.2025 SB2025070782
SB2025070784
SB2025070785
and 1 more
#VU112445 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-52496
CWE-362 Medium
No
No
3.6.4 07.07.2025 SB2025070782
SB2025070784
SB2025070785
and 3 more
#VU106011 - Improper Authentication
CVE-2025-27810
CWE-287 Medium
No
No
2.28.10, 3.6.3 25.03.2025 SB2025032526
SB2026033149
#VU106010 - Improper Certificate Validation
CVE-2025-27809
CWE-295 Medium
No
No
2.28.10, 3.6.3 25.03.2025 SB2025032526
#VU97655 - Heap-based Buffer Overflow
CVE-2023-45199
CWE-122 High
No
No
3.5.0 23.09.2024 SB2023101022
SB2024092358
#VU97654 - Out-of-bounds read
CVE-2022-46393
CWE-125 Medium
No
No
2.28.2, 3.3.0 23.09.2024 SB2022121542
SB2024092358
SB2023010451
and 3 more
#VU97653 - Observable discrepancy
CVE-2022-46392
CWE-203 Low
No
No
2.28.2, 3.3.0 23.09.2024 SB2022121542
SB2024092358
SB2023010451
and 3 more
#VU96651 - Improper Authentication
CVE-2024-45159
CWE-287 Low
No
No
3.6.1 02.09.2024 SB2024090202
SB2024090451
SB2024090954
and 1 more
#VU96650 - Stack-based buffer overflow
CVE-2024-45158
CWE-121 Medium
No
No
3.6.1 02.09.2024 SB2024090202
SB2024090451
SB2024090954
#VU96647 - Insufficient Technical Documentation
CVE-2024-45157
CWE-1059 Medium
No
No
2.28.9, 3.6.1 30.08.2024 SB2024090202
SB2024090451
SB2024090954
and 3 more
#VU87972 - Resource Management Errors
CVE-2024-28960
CWE-399 Medium
No
No
2.28.8, 3.6.0 02.04.2024 SB2024040218
SB2024040223
SB2024040224
and 3 more
#VU86233 - Covert Timing Channel
CVE-2024-23170
CWE-385 Medium
No
No
2.28.7, 3.5.2 07.02.2024 SB2024020751
SB2024020761
SB2024020762
and 3 more
#VU86232 - Integer overflow
CVE-2024-23775
CWE-190 Medium
No
No
2.28.7, 3.5.2 07.02.2024 SB2024020751
SB2024020761
SB2024020762
and 4 more
#VU81727 - Out-of-bounds read
CVE-2023-43615
CWE-125 Medium
No
No
2.28.5, 3.5.0 10.10.2023 SB2023101022
SB2023101028
SB2023101029
and 4 more
#VU59050 - Double Free
CVE-2021-44732
CWE-415 High
No
No
2.16.12, 2.28.0, 3.1.0 17.12.2021 SB2021121719
SB2026033149
#VU54628 - Information Exposure Through Timing Discrepancy
CWE-208 Low
No
No
2.16.11, 2.27.0 08.07.2021 SB2021070825
#VU54627 - Information Exposure Through Timing Discrepancy
CWE-208 Low
No
No
2.16.11, 2.27.0 08.07.2021 SB2021070825
#VU46188 - Cryptographic Issues
CWE-310 Low
No
No
2.7.17, 2.16.8, 2.24.0 01.09.2020 SB2020090123


Showing elements 21 - 40 out of 55