VYPR
High severity8.2NVD Advisory· Published Mar 29, 2024· Updated Jun 17, 2026

CVE-2024-28960

CVE-2024-28960

Description

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Arm/Mbed Crypto2 versions
    cpe:2.3:a:arm:mbed_crypto:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arm:mbed_crypto:*:*:*:*:*:*:*:*range: <=3.1.0
    • (no CPE)range: unknown
  • Arm/MbedTLS3 versions
    cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*range: >=2.1.8,<2.28.8
    • cpe:2.3:a:trustedfirmware:mbed_tls:*:*:*:*:*:*:*:*range: >=3.0.0,<3.6.0
    • (no CPE)range: 2.18.0 - 2.28.x before 2.28.8, 3.x before 3.6.0
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
  • Mbed TLS/Mbed Cryptodescription

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.