Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg3m-c464-j5fh

Опубликовано: 02 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

EPSS

Процентиль: 36%
0.00426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-250

Связанные уязвимости

CVSS3: 9.8
ubuntu
5 месяцев назад

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

CVSS3: 9.8
nvd
5 месяцев назад

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

CVSS3: 9.8
debian
5 месяцев назад

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, ...

EPSS

Процентиль: 36%
0.00426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-250