VYPR
Critical severity9.8NVD Advisory· Published Dec 20, 2021· Updated Jun 17, 2026

CVE-2021-44732

CVE-2021-44732

Description

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Arm/MbedTLS3 versions
    cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*range: <2.16.12
    • cpe:2.3:a:trustedfirmware:mbed_tls:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:trustedfirmware:mbed_tls:3.0.0:preview1:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • Mbed/Mbed TLSdescription
  • ARMmbed/mbedtlsllm-create2 versions
    <3.0.1+ 1 more
    • (no CPE)range: <3.0.1
    • (no CPE)range: <3.0.1

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.