Arm · Mbed Tls · CVE-2018-9989
**Name of the Vulnerable Software and Affected Versions**
mbed TLS versions prior to 2.1.11
mbed TLS versions prior to 2.7.2
mbed TLS versions prior to 2.8.0
**Description**
The issue is related to a buffer over-read in the `ssl parse server psk hint()` function, which could cause a crash when handling invalid input.
**Recommendations**
For versions prior to 2.1.11, update to version 2.1.11 or later.
For versions prior to 2.7.2, update to version 2.7.2 or later.
For versions prior to 2.8.0, update to version 2.8.0 or later.