← Back to CVE List

CVE-2020-36476

Published: 2021-08-23T02:15Z
Last Modified: 2024-11-21T05:29Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt