CVE-2021-45451

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to…

published December 21, 2021

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Published
2021-12-21T00:00Z
EPSS history
Timeline
  • 21 DEC 00:00Z
    In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to…
    cvelistv5