What’s Vulnerable › Vulnerabilities
CVE-2025-49601
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-04 · updated 2026-06-17
- Weakness: CWE-125
Description
In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a possible out-of-bounds read on truncated input. Specifically, an out-of-bounds read in mbedtls_lms_import_public_key allows context-dependent attackers to trigger a crash or limited adjacent-memory disclosure by supplying a truncated LMS (Leighton-Micali Signature) public-key buffer under four bytes. An LMS public key starts with a 4-byte type indicator. The function mbedtls_lms_import_public_key reads this type indicator before validating the size of its input.
Affected products
- TrustedFirmware Mbed TLS: from 3.3.0 before 3.6.4 — fixed in 3.6.4
How to fix
Upgrade to a fixed version: TrustedFirmware Mbed TLS 3.6.4. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-49601 or the next vulnerability affects your stack