IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.7High

CVE-2026-25835

arm mbed tls; trustedfirmware mbed tls; trustedfirmware tf-psa-crypto Published: (7 months ago)

Description

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).

Weakness (CWE): CWE-335

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
arm mbed tls 2.18.0 – < 3.6.6
trustedfirmware mbed tls 4.0.0
trustedfirmware tf-psa-crypto < 1.1.0

References and patches

CPE matches (NVD) (3)
  • cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* ≥ 2.18.0 < 3.6.6
  • cpe:2.3:a:trustedfirmware:mbed_tls:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:trustedfirmware:tf-psa-crypto:*:*:*:*:*:*:*:* < 1.1.0