VYPR
Low severity2.9NVD Advisory· Published Sep 24, 2026

CVE-2026-73064

CVE-2026-73064

Description

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Arm/MbedTLSllm-create
    Range: 3.2.0-3.6.6, 4.0.0-4.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.