CVE-2025-48965

ADVISORY - nist

Summary

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val.len greater than zero.

EPSS Score⁠: 0.0006 (0.187)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-476⁠

NULL Pointer Dereference

CWE-696⁠

Incorrect Behavior Order

Impacted images

Advisories

NIST

CREATED

9 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2025-48965⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-476⁠CWE-696⁠

CVSS SCORE

4medium

Alpine

CREATED

9 months ago

UPDATED

16 days ago

ADVISORY IDCVE-2025-48965⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

10 months ago

UPDATED

9 days ago

ADVISORY IDCVE-2025-48965⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

9 months ago

UPDATED

27 days ago

ADVISORY IDCVE-2025-48965⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium