CVE-2014-8628: Polarssl

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue.

Affected products

• Polarssl Polarssl: up to and including 1.2.11; version 1.3.0 only; version 1.3.1 only; version 1.3.2 only; version 1.3.3 only; version 1.3.4 only; …

Published 2015-08-24. Last modified 2026-06-17.