Approved changes feed: RSS · Atom

cpe:2.3:a:arm:mbed_tls:2.8.0:rc1:*:*:*:*:*:*

part: a version: 2.8.0 update: rc1

VendorArm (992f6a5c-1bc7-5785-a659-421ca2a38af9)
ProductMbed Tls (8f45e1c2-2d75-5689-ba40-a760faee92f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.492769
pkg:deb/ubuntu/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.492770
pkg:github/armmbed/mbedtls purl2cpe 2026-06-01 10:16:54.492771
pkg:github/mbed-tls/mbedtls purl2cpe 2026-06-01 10:16:54.492773
pkg:rpm/fedora/mbedtls purl2cpe 2026-06-01 10:16:54.492774
pkg:rpm/opensuse/mbedtls purl2cpe 2026-06-01 10:16:54.492775

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9989 vulnerable 2026-06-08 05:12:08.409212 Details available
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
Published: 2018-04-10T19:00:00.000Z
Updated: 2024-08-05T07:32:00.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9988 vulnerable 2026-06-08 05:12:08.408430 Details available
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.
Published: 2018-04-10T19:00:00.000Z
Updated: 2024-08-05T07:24:56.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.