CVE-2021-45451: Arm Mbed TLS

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

Affected products

• Arm Mbed TLS: before 3.1.0 (fixed in 3.1.0)
• Fedoraproject Fedora: version 36 only; version 37 only

Published 2021-12-21. Last modified 2026-06-17.