Lucene search

K
osvGoogleOSV:CVE-2020-36476
HistoryAug 23, 2021 - 2:15 a.m.

CVE-2020-36476

2021-08-2302:15:06
Google
osv.dev
14
mbed tls
plaintext buffers
memory security

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.4%

An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.4%