PT-2026-29584 · Arm · Mbed Tls

Haruto Kimura + 1 · Publicado 2026-04-01 · Atualizado 2026-06-02 · CVE-2026-25833

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mbed TLS versões 3.5.0 através de 3.6.5

Description Um estouro de buffer existe na função x509 inet pton ipv6(). Este problema foi resolvido nas versões 3.6.6 e 4.1.0.

Recommendations Atualize para a versão 3.6.6 ou 4.1.0.

Correção

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2026-25833

ECHO-BDD6-92E0-39BB

OPENSUSE-SU-2026:10498-1

OPENSUSE-SU-2026:10615-1

SUSE-SU-2026:22016-1

Produtos afetados

Mbed Tls

Referências · 28

• https://mbed-tls.readthedocs.io/en/latest/security-advisories · Aviso do Fabricante
• https://bugzilla.suse.com/1261469 · Nota
• https://suse.com/security/cve/CVE-2026-25834 · Nota
• https://bugzilla.suse.com/1261478 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-25833 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-25833 · Aviso do Fabricante
• https://bugzilla.suse.com/1261477 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-25833 · Aviso do Fabricante
• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-inet-pton · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2026-25833 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-34876 · Nota
• https://suse.com/security/cve/CVE-2026-34871 · Nota
• https://suse.com/security/cve/CVE-2026-34874 · Nota
• https://cve.org/CVERecord?id=CVE-2026-25833 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-25833 · Nota