CVE-2021-45450 - CVE House
Back to Database
Status published High CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv...

Vulnerability Description

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45450

Credits & Attribution

No credits recorded in the NVD database.

References

More from trustedfirmware

View All →
CVE-2022-47630
Trusted Firmware-A through 2.8 has an out-of-bounds read in the...
Unknown 0
CVE-2022-47549
An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable...
Unknown 0
CVE-2021-44149
An issue was discovered in Trusted Firmware OP-TEE Trusted OS...
High 7.8
CVE-2021-43619
Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow...
High 7.8
CVE-2021-40327
Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has...
Medium 5.9

Affected Vendor

trustedfirmware

View all reports →

Affected Software

mbed tls, fedora
Vulnerable Versions:
2.22.0, 3.0.0, 36, 37

Timeline

Official Publish: December 21st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.