← Database

CVE-2021-45451

HIGH CVSS: 7.5 Published: 2021-12-21 Modified: 2026-06-17

Description

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

Affected Platforms

Arm Mbed TlsFedoraproject Fedora

Weakness Type

CWE-327

References