AIKIDO-2026-473689
Mbed-TLS.mbedtls is vulnerable to Out-of-bounds Read
75
High Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
Mbed TLS contains an out-of-bounds read vulnerability in the multipart CCM API. Applications that pass an oversized tag_len to mbedtls_ccm_finish() can cause the function to read beyond the bounds of an internal 16-byte authentication tag buffer, potentially disclosing adjacent cryptographic state and other sensitive memory. The issue affects applications using the public multipart CCM API with untrusted or improperly validated input.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and call the multipart CCM API (mbedtls_ccm_finish) with a tag_len that is not validated to the CCM tag size.
Background info
Mbed-TLS.mbedtls is vulnerable to Out-of-bounds Read in versions 3.1.0 - 3.6.5.
How to fix this
Upgrade to a patched version. If this is not possible, avoid exposing the multipart CCM API to untrusted callers, prefer the one-shot CCM or PSA/cipher APIs, and ensure tag_len is validated and matches the value configured during mbedtls_ccm_set_lengths().
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ccm-finish-boundary-check/mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant