VULNERABILITY INTELLIGENCE

CVE-2026-34877

CVSS score9.8 CRITICAL
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-04-02
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-250

Primary references