CVE-2026-25833
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Apr 1, 2026
CISA due date
—
The record
Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Leap 16.0 | mbedtls | 0 | 3.6.6-bp160.1.1 |
| openSUSE:Tumbleweed | mbedtls | 0 | 3.6.6-1.1 |
| openSUSE:Tumbleweed | ovmf | 0 | 202602-9.1 |
Related vulnerabilities
- CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random… Also affects mbedtls
- CVE-2026-25834 Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. Also affects mbedtls
- CVE-2024-49195 Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing… Also affects mbedtls
- CVE-2026-34877 An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Also affects mbedtls
- CVE-2026-34876 An issue was discovered in Mbed TLS 3.x before 3.6.6. Also affects mbedtls
- CVE-2026-34873 An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Also affects mbedtls
- CVE-2026-34872 An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. Also affects mbedtls
- CVE-2026-34871 An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto… Also affects mbedtls