AIKIDO-2026-812875
Mbed-TLS.mbedtls is vulnerable to Improper Verification of Cryptographic Signature
49
Medium Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
In mbedtls_lms_verify(), the return values of the internal Merkle tree helper functions are not checked. If hashing fails, the candidate root node buffer can remain uninitialized while verification proceeds using stale stack data. An attacker able to induce hardware hash-accelerator faults can make the function accept an invalid LMS signature after a prior valid verification. The fix checks the internal return values so verification fails safely when hashing does not complete.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you verify LMS signatures using a hardware hash accelerator that an attacker can fault.
Background info
Mbed-TLS.mbedtls is vulnerable to Improper Verification of Cryptographic Signature in versions 3.3.0 - 3.6.3.
How to fix this
Upgrade the Mbed-TLS.mbedtls library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant