AIKIDO-2026-633623
Mbed-TLS.mbedtls is vulnerable to NULL Pointer Dereference
75
High Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
A memory allocation failure during mbedtls_x509_string_to_names(), including its indirect callers that set X.509 subject and issuer names, can lead to a memcpy() with a NULL destination pointer. On systems with memory protection this crashes the process, but on microcontrollers where address zero is writable it can overwrite an interrupt vector and enable code execution. The trigger is a memory allocation failure while building a distinguished name. The fix handles the allocation failure without dereferencing the NULL pointer.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application sets X.509 distinguished names under conditions where memory allocation can fail.
Background info
Mbed-TLS.mbedtls is vulnerable to NULL Pointer Dereference in versions 3.5.0 - 3.6.5 and 4.0.0 - 4.0.0.
How to fix this
Upgrade the Mbed-TLS.mbedtls library to the patch version.
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-null-pointer-dereference-x509/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant