CVE-2026-34875

critical · 9.8

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.

9.8

CVSS

0.4%

EPSS (exploit prob.)

30th

EPSS percentile

2026-04-01

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Vendor	Product	Affected versions
trustedfirmware	mbed_tls	>= 3.5.0, < 3.6.6
trustedfirmware	tf-psa-crypto	< 1.1.0

Check a specific version with /api/v1/cve/match.

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-34875