Sploitus

48 exploited vulnerabilities in Mbed Tls

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Debian, Mbed Tls, Red Os, Arm, Linux Mint
With known exploits
48
Affected Arm Mbed Tls versions
< 2.28.5, 2.28.2, 3.6.6, 3.6.4, 2.16.12, 2.28.0, 2.28.1, 2.28.8, 2.28.7, 2.7.18, 2.16.9, 2.25.0, 3.5.2, 3.0.0, 2.26.0, 3.6.5, 2.1.14, 2.7.5, 2.12.0, 2.28.10
Affected Trustedfirmware Mbed Tls versions
< 3.5.0, 3.3.0, 4.0.0, 3.6.6, 3.6.2, 3.6.1, 3.6.0, 3.0.0, 4.1.0, 3.2.0, 1.3.18, 2.0.0, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.4.0, 3.5.2, 3.6.4, 3.6.3
Affected Trustedfirmware Tf-psa-crypto versions
< 1.1.0
Affected Arm Tf-psa-crypto versions
= 1.0.0
Affected Arm Mbed Crypto versions
≤ 3.1.0
Affected Zephyrproject Zephyr versions
≤ 4.3.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2023-43615
CVSS 10.0 HIGH 2023-10-05FIX AVAILABLE
CVE-2023-45199
CVSS 10.0 CRITICAL 2023-10-06FIX AVAILABLE
CVE-2022-46393
CVSS 10.0 CRITICAL 2022-12-15FIX AVAILABLE
CVE-2026-34877
CVSS 9.8 CRITICAL 2026-04-02FIX AVAILABLE
CVE-2026-34875
CVSS 9.8 CRITICAL 2026-04-01FIX AVAILABLE
CVE-2025-47917 2 exploits
CVSS 9.8 CRITICAL 2025-01-01FIX AVAILABLE
Mbed TLS 3.6.4 - Use-After-FreeExploit for Use After Free in Arm Mbed_Tls
CVE-2024-49195
CVSS 9.8 CRITICAL 2024-10-15FIX AVAILABLE
CVE-2024-45159
CVSS 9.8 CRITICAL 2024-09-05FIX AVAILABLE
CVE-2024-45158
CVSS 9.8 CRITICAL 2024-09-05FIX AVAILABLE
CVE-2021-44732
CVSS 9.8 CRITICAL 2021-12-18FIX AVAILABLE
CVE-2026-34873
CVSS 9.1 CRITICAL 2026-04-01FIX AVAILABLE
CVE-2026-34872
CVSS 9.1 CRITICAL 2026-04-01FIX AVAILABLE
CVE-2024-30166
CVSS 9.1 CRITICAL 2024-04-02FIX AVAILABLE
CVE-2022-35409
CVSS 9.1 CRITICAL 2022-07-13FIX AVAILABLE
CVE-2024-28960
CVSS 8.2 HIGH 2024-03-25
CVE-2017-2784 1 exploit
CVSS 8.1 HIGH 2015-12-04FIX AVAILABLE
ARM Mbedtls x509 ECDSA invalid public key Remote Code Execution Vulnerability(CVE-2017-2784)
CVE-2025-52496
CVSS 7.8 HIGH 2025-06-30FIX AVAILABLE
CVE-2024-23775
CVSS 7.8 HIGH 2024-01-09FIX AVAILABLE
CVE-2020-36478
CVSS 7.8 HIGH 2020-12-12FIX AVAILABLE
CVE-2026-25835
CVSS 7.7 HIGH 2026-04-01FIX AVAILABLE
CVE-2026-34876
CVSS 7.5 HIGH 2026-04-02FIX AVAILABLE
CVE-2026-34874
CVSS 7.5 HIGH 2026-04-01FIX AVAILABLE
CVE-2026-25833
CVSS 7.5 HIGH 2026-04-01FIX AVAILABLE
CVE-2025-48965
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2024-23744
CVSS 7.5 HIGH 2024-01-21
CVE-2023-52353
CVSS 7.5 HIGH 2024-01-21
CVE-2021-43666
CVSS 7.5 HIGH 2021-11-08
CVE-2021-24119
CVSS 6.8 MEDIUM 2021-03-13
CVE-2026-34871
CVSS 6.7 MEDIUM 2026-04-01FIX AVAILABLE
CVE-2026-25834
CVSS 6.5 MEDIUM 2026-04-01FIX AVAILABLE
CVE-2025-49601
CVSS 6.5 MEDIUM 2025-06-30FIX AVAILABLE
CVE-2024-28755
CVSS 6.5 MEDIUM 2024-04-02FIX AVAILABLE
CVE-2025-54764
CVSS 6.2 MEDIUM 2025-10-20FIX AVAILABLE
CVE-2018-0497
CVSS 5.9 MEDIUM 2018-07-28FIX AVAILABLE
CVE-2024-23170
CVSS 5.5 MEDIUM 2024-01-10FIX AVAILABLE
CVE-2025-27810
CVSS 5.4 MEDIUM 2025-03-24FIX AVAILABLE
CVE-2025-27809
CVSS 5.4 MEDIUM 2025-03-24FIX AVAILABLE
CVE-2024-28836
CVSS 5.4 MEDIUM 2024-04-02FIX AVAILABLE
CVE-2026-1677
CVSS 5.3 MEDIUM 2026-05-11
CVE-2025-59438
CVSS 5.3 MEDIUM 2025-10-21FIX AVAILABLE
CVE-2022-46392
CVSS 5.3 MEDIUM 2022-12-15FIX AVAILABLE
CVE-2020-36421
CVSS 5.3 MEDIUM 2020-07-02FIX AVAILABLE
CVE-2025-66442
CVSS 5.1 MEDIUM 2026-04-01FIX AVAILABLE
CVE-2024-45157
CVSS 5.1 MEDIUM 2024-09-03FIX AVAILABLE
CVE-2025-49600
CVSS 4.9 MEDIUM 2025-06-30FIX AVAILABLE
CVE-2025-52497
CVSS 4.8 MEDIUM 2025-06-30FIX AVAILABLE
CVE-2018-0498
CVSS 4.7 MEDIUM 2018-07-28FIX AVAILABLE
CVE-2025-49087
CVSS 4.0 MEDIUM 2025-06-30FIX AVAILABLE