JLSEC-2025-229
NoneCVSS
—
EPSS
—
Published
Nov 21, 2025
CISA due date
—
The record
Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_bu...
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Julia | MbedTLS_jll | 0 | 2.28.1010+0 |
Related vulnerabilities
- JLSEC-2025-212 An issue was discovered in Mbed TLS before 2.24.0 Also affects MbedTLS_jll
- JLSEC-2025-221 Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in… Also affects MbedTLS_jll
- JLSEC-2025-198 Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is… Also affects MbedTLS_jll
- JLSEC-2025-199 The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through… Also affects MbedTLS_jll
- JLSEC-2025-208 An issue was discovered in Arm Mbed TLS before 2.24.0 Also affects MbedTLS_jll
- JLSEC-2025-224 Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows… Also affects MbedTLS_jll
- JLSEC-2025-206 An issue was discovered in Arm Mbed TLS before 2.23.0 Also affects MbedTLS_jll
- JLSEC-2025-211 An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before… Also affects MbedTLS_jll