Eva Crystal

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.0 through 3.6.5 Description An out-of-bounds read issue exists in the `mbedtls ccm finish()` function within the library/ccm.c file of Mbed TLS. This allows attackers to potentially obtain adjacent CCM context data by invoking the multipart CCM API with an oversized `tag len` parameter. The root cause is the lack of validation of the `tag len` parameter against the size of the internal 16-byte authentication buffer. The issue impacts the public multipart CCM API in Mbed TLS 3.x, where `mbedtls ccm finish()` can be directly called by applications. Recommendations Update to Mbed TLS version 3.6.6 or later.

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 2.19.0 through 3.6.5, Mbed TLS version 4.0.0 Description A flaw exists in Mbed TLS that, due to insufficient protection of serialized SSL context or session structures, could allow an attacker who can modify these structures to cause memory corruption, potentially leading to arbitrary code execution. This is a result of Incorrect Use of Privileged APIs. Recommendations Update to a version beyond 3.6.5. Update to a version beyond 4.0.0.

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.5.x and 3.6.x through 3.6.5 TF-PSA-Crypto version 1.0 Description A flaw exists due to improper input validation in Finite-Field Diffie-Hellman (FFDH), leading to a lack of contributory behavior. An attacker can manipulate the shared secret to a limited set of values. This is a concern for protocols relying on contributory behavior. The attack can be initiated by the peer or an active network attacker. Recommendations Update Mbed TLS to a version later than 3.6.5. Update TF-PSA-Crypto to a version later than 1.0.