low2.9
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TL…
Impact
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
Affected products
| Product | Affected versions |
|---|---|
| Mbed TLS 3.2.0 Though 3.6.6 And 4.0.0 | through 4.1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.