CVE-2026-87044

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A memory leak exists in the Mbed TLS crypto shim driver within drivers/crypto/crypto mbedtls shim.c during PSA multipart cipher and AEAD operations. In the mbedtls cbc() and mbedtls aead() functions, error paths following a successful psa cipher encrypt setup() or psa aead decrypt setup() return without calling psa cipher abort() or psa aead abort(). This prevents the execution of mbedtls cipher free(), leading to a permanent leak of the heap-allocated mbedtls aes context or a secure-partition multipart-operation slot.

An unauthenticated attacker can trigger this by sending a stream of syntactically valid 802.15.4 frames with an invalid Message Integrity Check (MIC), causing psa aead verify() to fail. Similarly, the CBC path can be exploited via the OSDP secure channel where osdp encrypt() and osdp decrypt() fail inside psa cipher update(). Exhausting the Mbed TLS heap causes all subsequent mbedtls calloc() calls to fail, resulting in a permanent denial of service for all cryptographic operations, including link-layer security and TLS/DTLS, until the device is rebooted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.