// CVE · Published · NVD
Out-of-bounds read in mbedtls_ccm_finish(): an oversized tag_len in the multipart CCM API exposes adjacent CCM context data. Discovered through the Intigriti Trusted Firmware program.
The multipart CCM API in Mbed TLS accepted an oversized tag_len in mbedtls_ccm_finish(). The tag copy then read past the tag inside the CCM context and returned adjacent context memory to the caller.
An out-of-bounds read that discloses CCM context data to whoever controls the tag length. NVD scores it 7.5 with CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The finding came out of the Intigriti Trusted Firmware programme, where Mbed TLS is in scope as the crypto library of TF-M and TF-A.
Eva Crystal (0xiviel), XSource Security.
Integer underflow of mlen in crypto_sign_open() in the CROSS reference implementation leads to a heap buffer overflow during signature verification.
Insufficient protection of serialized SSL session/context data can lead to memory-safety issues when restoring tampered or corrupted state. Credited jointly with Haruto Kimura (Stella).
FFDH key exchange lacks contributory-behaviour / peer-key validation, enabling protocol-level abuse. Found independently by Eva Crystal (0xiviel).
Possible buffer overflow in mbedtls_ecdh_calc_secret() when the output buffer is too small - up to remote code execution.
