GCVE - cpe:2.3:a:arm:tf-psa-crypto:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arm:tf-psa-crypto:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Arm (`992f6a5c-1bc7-5785-a659-421ca2a38af9`)
Product	Tf Psa Crypto (`fe167825-0683-5299-9a6b-2359628af8e0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-34875`	vulnerable	2026-06-08 07:59:13.271062	Details available An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys. Published: 2026-04-01T00:00:00.000Z Updated: 2026-04-01T18:29:02.514Z Open on db.gcve.eu Reference links https://mbed-tls.readthedocs.io/en/latest/security-advisories/ https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ffdh-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-34871`	vulnerable	2026-06-08 07:59:13.266272	Details available An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG). Published: 2026-04-01T00:00:00.000Z Updated: 2026-04-01T20:04:34.444Z Open on db.gcve.eu Reference links https://mbed-tls.readthedocs.io/en/latest/security-advisories/ https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-dev-random/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-25835`	vulnerable	2026-06-08 07:53:20.524662	Details available Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). Published: 2026-04-01T00:00:00.000Z Updated: 2026-04-01T20:07:53.961Z Open on db.gcve.eu Reference links https://mbed-tls.readthedocs.io/en/latest/security-advisories/ https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-rng-cloning/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-66442`	vulnerable	2026-06-08 07:41:18.935294	Details available In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected. Published: 2026-04-01T00:00:00.000Z Updated: 2026-04-01T20:00:06.815Z Open on db.gcve.eu Reference links https://github.com/Mbed-TLS/mbedtls/releases https://mbed-tls.readthedocs.io/en/latest/security-advisories/ https://github.com/Mbed-TLS/TF-PSA-Crypto/releases https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-compiler-induced-constant-time-violations/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.