In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-12-21T00:00:00
Updated: 2024-08-04T04:39:20.702Z
Reserved: 2021-12-21T00:00:00
Link: CVE-2021-45451
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-12-21T07:15:06.860
Modified: 2024-11-21T06:32:14.177
Link: CVE-2021-45451
Redhat
No data.