Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-34874

Опубликовано: 01 апр. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trustedfirmware:mbed_tls:*:*:*:*:*:*:*:*
Версия от 3.5.0 (включая) до 3.6.6 (исключая)
cpe:2.3:a:trustedfirmware:mbed_tls:4.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00279
Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.

msrc
3 месяца назад

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.

CVSS3: 7.5
debian
4 месяца назад

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0. ...

CVSS3: 7.5
github
4 месяца назад

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.

suse-cvrf
2 месяца назад

Security update for ovmf

EPSS

Процентиль: 20%
0.00279
Низкий

7.5 High

CVSS3

Дефекты

CWE-476