CVE-2025-27810

ADVISORY - nist

Summary

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

EPSS Score⁠: 0.00274 (0.192)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-908⁠

Use of Uninitialized Resource

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.