Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-10 02:47:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10943 from ronald-cron-arm/cve_id_issue_1618-3.6

Browse Source 
3.6: Add CVE-2026-73096 ID in ChangeLog
This commit is contained in:
David Horstmann
2026-09-03 11:02:35 +00:00
committed by GitHub
parent d6664ceac9 0f82ff2d25
commit 3003321c07
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog
+1 -1
View File
@@ -41,7 +41,7 @@ Security
unauthenticated plaintext data to be processed across a key change. In
servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
man-in-the-middle attacker to cause loss of 0-RTT early data.
Reported by Ben Smyth.
Reported by Ben Smyth. CVE-2026-73096
* Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the
provided output buffer is too small, sometimes (depending on the value of
the computed shared secret), the function would not return an error as it