Skip to main content

Mbed Tls CVE-2024-23775

HIGH
Integer Overflow or Wraparound (CWE-190)
N/A vendor:alpine
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
CVSS changed
Jun 05, 2026 - 19:52 NVD
7.5 (HIGH)
CVE Published
May 27, 2026 - 23:14 nvd
MEDIUM

DescriptionCVE.org

Alpine Linux: mbedtls fixed in 2.28.7-r0

Analysis

Alpine Linux: mbedtls fixed in 2.28.7-r0

CVE-2021-44732 CRITICAL POC
9.8 Dec 20

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_sessi

CVE-2022-35409 CRITICAL POC
9.1 Jul 15

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. Rated critical severity (CVSS 9.1), this vulnera

CVE-2017-2784 HIGH POC
8.1 Apr 20

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before

CVE-2025-52496 HIGH POC
7.8 Jul 04

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may b

CVE-2023-45199 CRITICAL
9.8 Oct 07

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution. Rated critical sev

CVE-2024-23744 HIGH POC
7.5 Jan 21

An issue was discovered in Mbed TLS 3.5.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, n

CVE-2024-49195 CRITICAL
9.8

Alpine Linux: mbedtls fixed in 3.6.2-r0

CVE-2022-46393 CRITICAL
9.8 Dec 15

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. Rated critical severity (CVSS 9.8), this vulnera

CVE-2024-45158 CRITICAL
9.8

Alpine Linux: mbedtls fixed in 3.6.1-r0

CVE-2024-45159 CRITICAL
9.8

Alpine Linux: mbedtls fixed in 3.6.1-r0

CVE-2026-34877 CRITICAL
9.8 Apr 02

Mbed TLS versions 2.19.0 through 3.6.5 and 4.0.0 allow remote code execution through memory corruption when attackers mo

CVE-2018-0488 CRITICAL
9.8 Feb 13

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows

Share

CVE-2024-23775 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy