CVE-2026-34872
CRIT 9.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).
Affected Applications in Environment
20
Harmony
v2.1.63.0
1 device
PyCharm
v2023.2.0.PY-232.8660.197
29 devices
PyCharm
v252.23892.515.0-PY
26 devices
PyCharm
v252.27397.106.0-PY
4 devices
PyCharm
v2022.2.3 (PC-222.4345.23)
1 device
PyCharm
v253.29346.308.0-PY
2 devices
PyCharm
v2019.2.3.PY-192.6817.19
1 device
PyCharm
v252.26830.99.0-PY
5 devices
PyCharm
v251.26094.141.0-PY
1 device
PyCharm
v2023.1.2.PC-231.9011.38
2 devices
PyCharm
v252.25557.178.0-PY
1 device
PyCharm
v253.31033.139.0-PY
3 devices
PyCharm
v2024.3.1.1 (PC-243.22562.220)
1 device
PyCharm
v252.23892.439.0-PY
1 device
PyCharm
v253.29346.142.0-PY
2 devices
PyCharm
v2024.3.4 (PC-243.25659.43)
1 device
PyCharm
v253.30387.173.0-PY
1 device
PyCharm
v253.32098.74.0-PY
1 device
PyCharm
v252.28539.27.0-PY
1 device
PyCharm
v2022.3.1.PC-223.8214.51
1 device
Affected Devices
81
A02431789-Y45D2V9TXH
Mac
BELMONT-GRAD-75
Windows
CS-LAB11
Windows
CS-LAB12
Windows
CS-LAB13
Windows
DESKTOP-19H8RLU
Windows
DESKTOP-FA7AMSL
Windows
DESKTOP-UDQ5LTQ
Windows
DESKTOP-UVH1MF1
Windows
DPCOMP-05143MP
Windows
DPEMAE-7242KJQ
Windows
DPEMAE-A7242KK9
Windows
DPLAEP-PF5S8FRS
Windows
DPLIBR-JKQ4284
Windows
DPMATH-177666
Windows
DPUWRL-PF5K758F
Windows
DPUWRL-PF5NV3P2
Windows
DPUWRL-R9116DTX
Windows
DigitalStudent-154737.local
Mac
EDL-12
Windows
EDL-17
Windows
EDL-28
Windows
EDL-34
Windows
EL105-01
Windows
EL105-02
Windows
EL105-03
Windows
EL105-04
Windows
EL105-05
Windows
EL105-07
Windows
EL105-08
Windows
EL105-09
Windows
EL105-10
Windows
EL105-11
Windows
EL105-12
Windows
EL105-13
Windows
EL105-14
Windows
EL105-15
Windows
EL105-16
Windows
EL105-17
Windows
EL105-18
Windows
EL105-19
Windows
EL105-20
Windows
EL105-21
Windows
EL105-22
Windows
EL105-23
Windows
EL105-24
Windows
EL105-25
Windows
EL105-26
Windows
EL105-27
Windows
EL105-28
Windows
EL105-29
Windows
EL105-30
Windows
ENGR30102
Windows
ENGR30105
Windows
ENGR30108
Windows
ENGR30114
Windows
ENGR30119
Windows
ENGR30120
Windows
ENGR30131
Windows
ENGR30132
Windows
ENGR30137
Windows
ENGR30144
Windows
ENGR30302
Windows
ENGR30303
Windows
ENGR30307
Windows
ENGR30322
Windows
ENGR30324
Windows
ENGR30327
Windows
ENGR30328
Windows
ENGR30336
Windows
ENGR30730
Windows
ENGR30735
Windows
ENGR30736
Windows
ENGR30752
Windows
Kotaro
Mac
TULLIS-5
Windows
USULOAN238
Windows
USULOAN282
Windows
USULOAN289
Windows
USULOAN335
Windows
USULOAN487
Windows