CVE-2025-49601

published 2025-07-04

CVE-2025-49601: In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a…

Priority P3 34 medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I N A L

In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a possible out-of-bounds read on truncated input. Specifically, an out-of-bounds read in mbedtls_lms_import_public_key allows context-dependent attackers to trigger a crash or limited adjacent-memory disclosure by supplying a truncated LMS (Leighton-Micali Signature) public-key buffer under four bytes. An LMS public key starts with a 4-byte type indicator. The function mbedtls_lms_import_public_key reads this type indicator before validating the size of its input.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	mbedtls	< mbedtls 3.6.4-1 (forky)	mbedtls 3.6.4-1 (forky)
mbed	mbedtls	>= 0 < 3.6.4-1	3.6.4-1
mbed	mbedtls	>= 0 < 3.6.4-1	3.6.4-1
mbed	mbedtls	>= 3.3.0 < 3.6.4	3.6.4
trustedfirmware	mbed_tls	>= 3.3.0 < 3.6.4	3.6.4

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

osv 6.5 MEDIUM

vendor_debian 4.8 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-125