PT-2025-48515

Published

2025-11-21

·

Updated

2025-11-21

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls pkcs12 derivation function when an input password's length is 0.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2025-217
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com