AIKIDO-2026-667539
Mbed-TLS.mbedtls is vulnerable to Buffer Overflow
80
High Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
When exporting a finite-field Diffie-Hellman public key, psa_export_public_key() does not verify that the caller-provided output buffer is large enough before writing the key. If the buffer is smaller than the public key, the function writes the entire key anyway and overflows the buffer. This memory corruption can lead to arbitrary code execution when an application exports an FFDH key into an undersized buffer. The fix checks the output buffer size before writing.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application exports FFDH public keys with psa_export_public_key() into a caller-provided buffer.
Background info
Mbed-TLS.mbedtls is vulnerable to Buffer Overflow in versions 3.5.0 - 3.6.5.
How to fix this
Upgrade the Mbed-TLS.mbedtls library to the patch version.
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-ffdh-buffer-overflow/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant