Mbed Tls · Mbed Tls · CVE-2025-48965
**Name of the Vulnerable Software and Affected Versions**
mbedtls versions prior to 3.6.4
**Description**
The software contains a NULL pointer dereference issue in the `mbedtls asn1 store named data` function. This occurs when conflicting data is triggered with `val.p` being NULL but `val.len` being greater than zero.
**Recommendations**
Update to version 3.6.4 or later.