CVE-2026-87044 | Zephyr Project up to 4.4.x Mbed TLS crypto shim driver crypto_mbedtls_shim.c mbedtls_cbc/mbedtls_aead memory leak

November 4, 2026 Yanac

A vulnerability classified as critical has been found in Zephyr Project Zephyr up to 4.4.x. The affected element is the function mbedtls_cbc/mbedtls_aead of the file drivers/crypto/crypto_mbedtls_shim.c of the component Mbed TLS crypto shim driver. This manipulation causes memory leak.

This vulnerability is registered as CVE-2026-87044. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More