Search Results (42 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-49087 2 Mbed, Trustedfirmware 2 Mbedtls, Mbed Tls 2026-06-05 4 Medium
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
CVE-2026-34873 2 Mbed-tls, Trustedfirmware 2 Mbedtls, Mbed Tls 2026-06-05 9.1 Critical
An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.