Approved changes feed: RSS · Atom

cpe:2.3:a:arm:mbed_tls:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorArm (992f6a5c-1bc7-5785-a659-421ca2a38af9)
ProductMbed Tls (8f45e1c2-2d75-5689-ba40-a760faee92f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.511468
pkg:deb/ubuntu/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.511470
pkg:github/armmbed/mbedtls purl2cpe 2026-06-01 10:16:54.511472
pkg:github/mbed-tls/mbedtls purl2cpe 2026-06-01 10:16:54.511473
pkg:rpm/fedora/mbedtls purl2cpe 2026-06-01 10:16:54.511474
pkg:rpm/opensuse/mbedtls purl2cpe 2026-06-01 10:16:54.511476

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45450 vulnerable 2026-06-08 05:36:48.157579 Details available
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Published: 2021-12-21T00:00:00.000Z
Updated: 2024-08-04T04:39:21.039Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.