CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output…

published December 21, 2021

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01226 · 68.6th percentile
Published
2021-12-21T00:00Z
EPSS history
Timeline
  • 21 DEC 00:00Z
    In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output…
    cvelistv5