Mbed Tls
Vendor:
First CVE: Aug 30, 2017 · Active for 8 years
51
Total CVEs
More Total CVEs than 98% of tracked products
5.1
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mbed Tls over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 30, 2017
8 years ago
Most Recent CVE
Apr 2, 2026
117 days ago
CVE Severity & Scoring
Mbed Tls51 CVEs
47%
35%
18%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local13 (25.5%)
Network38 (74.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low33 (64.7%)
High18 (35.3%)
Unknown0 (0.0%)
User Interaction
None49 (96.1%)
Unknown0 (0.0%)
Required2 (3.9%)
Privileges Required
Low8 (15.7%)
High1 (2.0%)
None42 (82.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (51 CVEs).
51 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-47917CRITICAL Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtls_x509_string_to_nam | Jul 20, 2025 | 9.8 | 42 | NO | YES |
CVE-2026-34877CRITICAL An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who | Apr 2, 2026 | 9.8 | 34 | NO | NO |
CVE-2018-0487CRITICAL ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certifica | Feb 13, 2018 | 9.8 | 33 | NO | NO |
CVE-2018-0488CRITICAL ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial | Feb 13, 2018 | 9.8 | 32 | NO | NO |
CVE-2021-44732CRITICAL Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. | Dec 20, 2021 | 9.8 | 31 | NO | NO |
CVE-2026-34872CRITICAL An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using fi | Apr 1, 2026 | 9.1 | 30 | NO | NO |
CVE-2017-18187CRITICAL In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv. | Feb 14, 2018 | 9.8 | 30 | NO | NO |
CVE-2022-46393CRITICAL An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_ | Dec 15, 2022 | 9.8 | 29 | NO | NO |
CVE-2022-35409CRITICAL An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server | Jul 15, 2022 | 9.1 | 29 | NO | NO |
CVE-2026-25835HIGH Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). | Apr 1, 2026 | 7.7 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (51 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
2.0% of CVEs· 85th percentile
Social Chatter
Signals from CVEs in this product scope (51 CVEs).
Media Mentions
Signals from CVEs in this product scope (51 CVEs).
Top CNAs Publishing CVEs For Mbed Tls
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.6.2 | 1 | 8.1 | 1.5% | 0 | 0 |
| 2.4.2 | 1 | 8.1 | 1.5% | 0 | 0 |
| 2.1.9 | 1 | 8.1 | 1.5% | 0 | 0 |
| 2.1.7 | 1 | 8.1 | 1.5% | 0 | 0 |
| 1.3.21 | 1 | 8.1 | 1.5% | 0 | 0 |
| 1.3.19 | 1 | 8.1 | 1.5% | 0 | 0 |