CVE-2023-45199: Trustedfirmware Mbed TLS

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

Affected products

• Trustedfirmware Mbed TLS: from 3.2.0, before 3.5.0 (fixed in 3.5.0)

Published 2023-10-07. Last modified 2026-06-17.