PT-2026-29585 · Arm · Mbed Tls+1

CVE-2026-25835 · Publicado 2026-04-01 · Atualizado 2026-06-22

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Versões do Mbed TLS anteriores a 3.6.6 Versões do TF-PSA-Crypto anteriores a 1.1.0

Description O software utiliza sementes incorretamente dentro de um Gerador de Números Pseudoaleatórios (PRNG). Isso pode levar à geração de números aleatórios previsíveis.

Recommendations Atualize o Mbed TLS para a versão 3.6.6 ou posterior. Atualize o TF-PSA-Crypto para a versão 1.1.0 ou posterior.

Exploit

Correção

Enumeração de Fraquezas

CWE-335

Identificadores relacionados

CVE-2026-25835

ECHO-684C-26FC-673D

OPENSUSE-SU-2026:10498-1

OPENSUSE-SU-2026:20875-1

OPENSUSE-SU-2026:21144-1

SUSE-SU-2026:1952-1

SUSE-SU-2026:21440-1

SUSE-SU-2026:21981-1

SUSE-SU-2026:22016-1

Produtos afetados

Mbed Tls

Tf-Psa-Crypto

Referências · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25835.json · Exploit
• https://security.alpinelinux.org/vuln/CVE-2026-25835 · Nota
• https://bugzilla.suse.com/1246783 · Nota
• https://suse.com/security/cve/CVE-2025-52497 · Nota
• https://ubuntu.com/security/CVE-2026-25835 · Aviso do Fabricante
• https://bugzilla.suse.com/1245811 · Nota
• https://bugzilla.suse.com/1245810 · Nota
• https://bugzilla.suse.com/1246784 · Nota
• https://bugzilla.suse.com/1240052 · Nota
• https://suse.com/security/cve/CVE-2025-49601 · Nota
• https://suse.com/security/cve/CVE-2026-34872 · Nota
• https://suse.com/security/cve/CVE-2025-48965 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10498-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-34877 · Nota
• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-rng-cloning · Aviso do Fabricante