← Database

CVE-2021-45450

HIGH CVSS: 7.5 Published: 2021-12-21 Modified: 2026-06-17

Description

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

Affected Platforms

Trustedfirmware Mbed TlsFedoraproject Fedora

Weakness Type

CWE-327

References