PT-2025-48507 · Julia · Mbedtls Jll

Publicado 2025-11-21 · Atualizado 2025-11-21

OSV

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls x509 crl parse der has a buffer over-read (of one byte).

Identificadores relacionados

JLSEC-2025-209

Produtos afetados

Mbedtls Jll

Referências · 6

• https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0 · Nota
• https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-209 · Aviso do Fabricante
• https://bugs.gentoo.org/740108 · Nota
• https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html · Nota