Threats tagged 'ghsa-3p24-8mw5-x2hx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.3%	CVE-2025-52497Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two Medium4.8EPSS 0.3%2025-07-04GCVE DatabaseCVE-2025-52497 Mbed TLS versions prior to 3.6.4 contain a heap-based buffer underflow vulnerability in PEM parsing functions when processing untrusted PEM input. This flaw affects the functions mbedtls_pem_read_buffer and two mbedtls_pk_parse variants. The vulnerability can lead to a one-byte buffer underflow on the heap. EPSS 0.3%Report on CVE-2025-52497 Vulnerability CWE-193 #ghsa-3p24-8mw5-x2hx	GCVE Database	2025-07-04

Page 1 of 1