Browse CVEs

CRITICAL 9.8 CVE-2026-34877 An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session st… Mbed Tls 3.6.6+ Fix from $2,3002026-04-02 CRITICAL 9.1 CVE-2026-34872 An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to impr… Mbed Tls 3.6.6+ Fix from $2,3002026-04-01 MEDIUM 5.1 CVE-2025-66442 In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimi… Mbed Tls after 4.0.0 Fix from $1,6002026-04-01 MEDIUM 6.7 CVE-2026-34871 An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random … Mbed Tls 1.1.0 / 3.6.6+ Fix from $1,6002026-04-01 HIGH 7.7 CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). Mbed Tls 1.1.0 / 3.6.6+ Fix from $1,9502026-04-01 HIGH 7.9 CVE-2025-0647 In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, eit… C1 Ultra Firmware Mitigation only Fix from $1,9502026-01-14 MEDIUM 5.1 CVE-2025-6349 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged u… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002025-12-01 MEDIUM 5.1 CVE-2025-2879 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture K… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002025-12-01 MEDIUM 5.3 CVE-2025-59438 Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. Mbed Tls 3.6.5+ Fix from $1,6002025-10-21 MEDIUM 6.2 CVE-2025-54764 Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd. Mbed Tls 3.6.5+ Fix from $1,6002025-10-20 MEDIUM 5.3 CVE-2025-3212 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002025-09-08 MEDIUM 5.9 CVE-2025-7427 Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitati… Arm Development Studio 2025.0+ Fix from $1,6002025-07-22 CRITICAL 9.8 CVE-2025-47917 Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The func… Mbed Tls 3.6.4+ Fix from $2,3002025-07-20 HIGH 7.5 CVE-2025-48965 Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.le… Mbed Tls 3.6.4+ Fix from $1,9502025-07-20 HIGH 7.8 CVE-2025-52496 Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key … Mbed Tls 3.6.4+ Fix from $1,9502025-07-04 HIGH 7.8 CVE-2025-0073 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged u… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-06-02 HIGH 7.8 CVE-2025-0819 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-06-02 HIGH 7.8 CVE-2025-1246 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Us… 5th Gen Gpu Architecture Userspace Driver Mitigation only Fix from $1,9502025-06-02 HIGH 7.8 CVE-2025-0427 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-05-02 HIGH 7.8 CVE-2025-0072 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged u… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-05-02 MEDIUM 5.9 CVE-2025-0050 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Us… 5th Gen Gpu Architecture Userspace Driver Mitigation only Fix from $1,6002025-04-07 MEDIUM 5.4 CVE-2025-27809 Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the T… Mbed Tls 2.28.10 / 3.6.3+ Fix from $1,6002025-03-25 HIGH 7.8 CVE-2025-0015 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged u… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-02-03 MEDIUM 6.1 CVE-2024-6790 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002025-02-03 MEDIUM 5.1 CVE-2024-7881 An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents… C1 Premium Firmware Mitigation only Fix from $1,6002025-01-28 MEDIUM 5.1 CVE-2024-10929 In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a … Cortex A57 Firmware Mitigation only Fix from $1,6002025-01-22 HIGH 7.5 CVE-2024-11864 Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and cras… Scp Firmware 2.16.0+ Fix from $1,9502025-01-14 MEDIUM 5.3 CVE-2024-11863 Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and cras… Scp Firmware 2.16.0+ Fix from $1,6002025-01-14 CRITICAL 9.8 CVE-2024-5660 Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cort… Cortex A710 Firmware Mitigation only Fix from $2,3002024-12-10 HIGH 7.5 CVE-2024-48986 An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from i… Mbed Patch available Fix from $1,9502024-11-20