PT-2026-29586

CVE-2026-34871

Published

2026-04-01

Updated

2026-05-07

Description by

CVSS 3.1

6.7

Medium

MetricsAV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.6 and versions 4.0.0 through 4.1.0 TF-PSA-Crypto versions prior to 1.1.0

Description A flaw exists in the Pseudo-Random Number Generator (PRNG) due to a predictable seed. This issue impacts the generation of random numbers, potentially compromising the security of systems relying on these numbers.

Recommendations Update Mbed TLS to version 3.6.6 or later. Update Mbed TLS to version 4.1.0 or later. Update TF-PSA-Crypto to version 1.1.0 or later.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Related identifiers

CVE-2026-34871

ECHO-93FB-0419-2B65

JLSEC-2026-465