« List of all CVEs

CVE-2020-36476

Published: 8/23/2021 Last updated: 8/4/2024 Reserved: 8/23/2021

An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-mbedtls

Products affected (1)

Product Vendor Version
n/a n/a QCA6698AQ

References (10)