high7.7
CVE-2026-25835
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Impact
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arm | Mbed Tls | from 2.18.0 before 3.6.6 |
| Trustedfirmware | Mbed Tls | Version 4.0.0 |
| Trustedfirmware | Tf-Psa-Crypto | before 1.1.0 |