CVE-2025-27810 Security feature bypass in mbedtls
Attackers can bypass TLS authentication and perform replays due to uninitialized memory usage in Mbed TLS during specific error conditions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-27810?
CVE-2025-27810 is a medium-severity vulnerability in Arm Mbed Tls, published on 25 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
Weakness: CWE-908
Which versions are affected by CVE-2025-27810?
It affects 2 products.
Products include Arm Mbed Tls, Trustedfirmware Mbed Tls.
How do I fix CVE-2025-27810?
Upgrade to a fixed version.
Is CVE-2025-27810 being exploited?
There is no known exploitation of CVE-2025-27810 in the wild and no public exploit code.
Other vulnerabilities in Arm Mbed Tls
Sources
Also known as ALPINE-CVE-2025-27810, DEBIAN-CVE-2025-27810, GHSA-vvqm-mmw4-qwg5, JLSEC-2025-187, ROOT-OS-DEBIAN-12-CVE-2025-27810, UBUNTU-CVE-2025-27810.