Horizon Alert
Summary of the vulnerability and why it matters
An issue has been identified in Mbed TLS and TF-PSA-Crypto libraries related to public key export for FFDH keys, which could lead to a buffer overflow. While the libraries are used in various applications, their internal nature suggests the primary concern is confirming relevance and exposure within your specific deployed systems.
- A library vulnerability in key export operations.
- Confirms relevance and exposure within your systems.
- Assess library use for potential impact.
Attack Path
How an attacker could exploit the issue
An attacker could reach this vulnerability by sending specially crafted data to a system utilizing the affected cryptographic libraries. This could lead to a buffer overflow when the system attempts to export public keys for FFDH keys.
- No authentication or network access required.
- Public key export of FFDH keys.
- Potential for code execution and data compromise.
Live Threat
Current exploitation, exposure, and threat context
A buffer overflow in public key export for FFDH keys could allow an attacker to overwrite memory when the affected function is called.
- Exposed system or user data.
- Public key export functionality.
- Memory corruption or denial of service.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
The technical teams responsible for addressing this vulnerability will depend on how Mbed TLS and TF-PSA-Crypto are integrated. Application owners are likely accountable if these libraries are part of custom software, while platform or infrastructure teams may be responsible if they are core components of operating systems or managed services. The immediate first step is to inventory all deployments of these libraries, confirm their exposure and business criticality, and identify the specific system or application owner responsible for remediation planning.
- Identify and confirm affected systems.
- Verify library integration and exposure.
- Plan remediation based on risk.
