VDB
CVE-2026-34877
CVE-2026-34877
PUBLISHED
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is caused by Incorrect Use of Privileged APIs.
EPSS 0.44% · 38.4th percentile
Risk Scores
EPSS Score
0.44%
38.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
Timeline
- Apr 2, 2026 CVE Published
- Apr 2, 2026 PoC Published
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
- May 28, 2026 EPSS Score
- May 29, 2026 EPSS Score
- May 30, 2026 EPSS Score
References
- https://advisory.splunk.com/advisories/SVD-2026-0512 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0513 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0509 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0510 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0505 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0515 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0507 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0506 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0508 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0504 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0514 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0516 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0501 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0503 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0511 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0502 advisory
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/ url
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-serialized-data/ url