CVE-2026-34875
published 2026-04-01CVE-2026-34875: An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.37%
29.3th percentile
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mbedtls | — | — |
| trustedfirmware | mbed_tls | >= 3.5.0 < 3.6.6 | 3.6.6 |
| trustedfirmware | tf-psa-crypto | < 1.1.0 | 1.1.0 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export
vendor_redhat·2026-04-01·CVSS 9.8
CVE-2026-34875 [CRITICAL] CWE-120 mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export
mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
A flaw was found in Mbed TLS and TF-PSA-Crypto. This vulnerability, a buffer overflow, occurs during the export of public keys for FFDH (Finite Field Diffie-Hellman) keys. A remote attacker could exploit this to potentially execute arbitrary code, gaining full control over the affected system, or cause a denial of service, making the system unavailable.
Statement: Critical: A buffer overflow flaw in Mbed TLS and TF-PSA-Crypto during FFDH public key export could allow a remote attacker to execute arbitrary code or cause a denial of service. Red Hat
Debian
CVE-2026-34875: mbedtls - An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buf...
vendor_debian·2026·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875: mbedtls - An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buf...
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
OSV
CVE-2026-34875: (An issue was discovered in Mbed TLS through 3
osv·2026-04-02·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875: (An issue was discovered in Mbed TLS through 3
(An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1. ...)
OSV
CVE-2026-34875: An issue was discovered in Mbed TLS through 3
osv·2026-04-01·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875: An issue was discovered in Mbed TLS through 3
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
GHSA
GHSA-g3pc-q77x-rjjp: An issue was discovered in Mbed TLS through 3
ghsa_unreviewed·2026-04-01
CVE-2026-34875 [CRITICAL] CWE-120 GHSA-g3pc-q77x-rjjp: An issue was discovered in Mbed TLS through 3
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-34875 rust-psa-crypto-sys: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
bugzilla·2026-04-02·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875 rust-psa-crypto-sys: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
CVE-2026-34875 rust-psa-crypto-sys: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.
---
This package is not present in any active branch of Fedora.
Bugzilla
CVE-2026-34875 mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [epel-all]
bugzilla·2026-04-02·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875 mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [epel-all]
CVE-2026-34875 mbedtls: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-EPEL-2026-479c1d4133 (mbedtls-3.6.6-1.el10_1) has been submitted as an update to Fedora EPEL 10.1.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-479c1d4133
---
FEDORA-EPEL-2026-ba79b9dff1 (mbedtls-3.6.6-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ba79b9dff1
---
FEDORA-EPEL-2026-59a9d512a4 (mbedtls-3.6.6-1.el10_3) has been submitted
Bugzilla
CVE-2026-34875 micropython: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
bugzilla·2026-04-02·CVSS 9.8
CVE-2026-34875 [CRITICAL] CVE-2026-34875 micropython: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
CVE-2026-34875 micropython: Mbed TLS and TF-PSA-Crypto: Arbitrary code execution due to buffer overflow in FFDH key export [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Micropython is not affected by this as it doesn't enable FFDH.
Wiz
CVE-2026-34875 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.1
CVE-2026-34875 [MEDIUM] CVE-2026-34875 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-34875 :
Mbed TLS vulnerability analysis and mitigation
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.
Source : NVD
## 9.8
Score
Published April 1, 2026
Severity CRITICAL
CNA Score 9.8
Affected Technologies
Mbed TLS
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 16.4
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
cpe:2.3:a:arm:mbed_tls
mbedtls
Sources
Debian 11, 12, 13, 14 Severity CRITICAL No Fix Added at: Apr 02, 2026
Echo Severity CRITICAL No Fix Added at: Apr 02, 2026
Linux Severity CRITICAL Has Fix Added at: Apr 06, 2026
Linux Severity CRITICAL Has
2026-04-01
Published