Mbed TLS Shared Memory Mishandling Vulnerability
CVE-2024-28960

8.2HIGH

Key Information:

Vendor: Mbed TLS
Status: Mbed Tls; Mbed Crypto
Vendor: CVE Published:; 29 March 2024

What is CVE-2024-28960?

A vulnerability has been identified in Mbed TLS versions ranging from 2.18.0 to 2.28.x, as well as the 3.x versions prior to 3.6.0, affecting the PSA Crypto API. This issue revolves around the improper handling of shared memory, which may lead to unauthorized access or manipulation of sensitive data. It is critical for users of the affected versions to apply necessary updates to safeguard their systems against potential exploitation.