CVE-2024-45158

The vulnerability occurs in the mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der() functions when the 'bits' parameter passed by the application is larger than the size of the largest supported elliptic curve. In configurations with PSA (Platform Security Architecture) interface disabled, the issue affects all values of the 'bits' parameter. Stack overflow occurs when the application calls these functions directly – the library internally never calls these functions in a vulnerable manner. An attacker who can control the 'bits' parameter value or input data processed by the application can overwrite the stack memory.

An attacker can trigger arbitrary code execution (RCE) in the context of the process using the library or cause its crash. In case of successful exploitation, it is also possible to compromise the confidentiality and integrity of processed data.

Mbed TLS should be updated to version 3.6.1 or later. Detailed information is available in the vendor's security advisory: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-08-2/

Arm Mbed TLS version 3.6 before 3.6.1, particularly applications that directly call mbedtls_ecdsa_der_to_raw() or mbedtls_ecdsa_raw_to_der() functions; in configurations with PSA disabled, the scope of vulnerability is broader.