ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-36476”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36476
Published
2021-08-23
CVSS:
7.5
ShadowTrackr CVSS:
6.9
Summary:
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.