Lucene search

K
osvGoogleOSV:CVE-2021-45451
HistoryDec 21, 2021 - 7:15 a.m.

CVE-2021-45451

2021-12-2107:15:06
Google
osv.dev
6
mbed tls
psa_aead_generate_nonce
policy bypass
oracle-based decryption
memory locations
untrusted application
software

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

66.6%

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

66.6%