{"schema_version":1,"title":"TrustedFirmware vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in TrustedFirmware: 0 in the last 7 days and 1 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-54467, was published on 26 August 2026.","url":"https://junglewise.ai/threats/vendors/trustedfirmware","json_url":"https://junglewise.ai/threats/vendors/trustedfirmware.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/trustedfirmware","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":6,"all_time":13,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":10},"latest":[{"cve":"CVE-2026-54467","cvss":7,"epss":0.0017,"slug":"cve-2026-54467-trusted-firmware-m-mailbox-pointer-validation-vulnerability","title":"Trusted Firmware-M mailbox pointer validation vulnerability","severity":"high","exploited":false,"published_at":"2026-08-26T05:18:11.053+00:00","url":"https://junglewise.ai/threats/cve-2026-54467-trusted-firmware-m-mailbox-pointer-validation-vulnerability"},{"cve":"CVE-2026-33662","cvss":7.5,"epss":0.001,"slug":"cve-2026-33662-op-tee-os-integer-underflow-in-rsassa-pkcs1-v1-5-encoding","title":"OP-TEE OS integer underflow in RSASSA-PKCS1-v1_5 encoding","severity":"high","exploited":false,"published_at":"2026-04-24T19:17:09.997+00:00","url":"https://junglewise.ai/threats/cve-2026-33662-op-tee-os-integer-underflow-in-rsassa-pkcs1-v1-5-encoding"},{"cve":"CVE-2026-33317","cvss":8.7,"epss":0.0002,"slug":"cve-2026-33317-op-tee-out-of-bounds-read-and-write-in-pkcs-11-ta","title":"OP-TEE out-of-bounds read and write in PKCS#11 TA","severity":"high","exploited":false,"published_at":"2026-04-24T03:16:11.02+00:00","url":"https://junglewise.ai/threats/cve-2026-33317-op-tee-out-of-bounds-read-and-write-in-pkcs-11-ta"},{"cve":"CVE-2026-34877","cvss":9.8,"epss":0.0022,"slug":"cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl","title":"Mbed TLS memory corruption via insecure deserialization of SSL context","severity":"critical","exploited":false,"published_at":"2026-04-02T17:16:26.927+00:00","url":"https://junglewise.ai/threats/cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl"},{"cve":"CVE-2026-34876","cvss":7.5,"epss":0.0003,"slug":"cve-2026-34876-mbed-tls-out-of-bounds-read-in-mbedtls-ccm-finish","title":"Mbed TLS out-of-bounds read in mbedtls_ccm_finish","severity":"high","exploited":false,"published_at":"2026-04-02T16:16:26.18+00:00","url":"https://junglewise.ai/threats/cve-2026-34876-mbed-tls-out-of-bounds-read-in-mbedtls-ccm-finish"},{"cve":"CVE-2026-34873","cvss":9.1,"epss":0.0004,"slug":"cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption","title":"Mbed TLS client impersonation in TLS 1.3 session resumption","severity":"critical","exploited":false,"published_at":"2026-04-01T21:17:01.99+00:00","url":"https://junglewise.ai/threats/cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption"},{"cve":"CVE-2026-34874","cvss":7.5,"epss":0.0008,"slug":"cve-2026-34874-mbed-tls-null-pointer-dereference-in-x-509-distinguished-name","title":"Mbed TLS NULL pointer dereference in X.509 distinguished name parsing","severity":"high","exploited":false,"published_at":"2026-04-01T19:16:33.39+00:00","url":"https://junglewise.ai/threats/cve-2026-34874-mbed-tls-null-pointer-dereference-in-x-509-distinguished-name"},{"cve":"CVE-2026-25833","cvss":7.5,"epss":0.0005,"slug":"cve-2026-25833-mbed-tls-buffer-underflow-in-x509-inet-pton-ipv6","title":"Mbed TLS buffer underflow in x509_inet_pton_ipv6","severity":"high","exploited":false,"published_at":"2026-04-01T19:16:28.53+00:00","url":"https://junglewise.ai/threats/cve-2026-25833-mbed-tls-buffer-underflow-in-x509-inet-pton-ipv6"},{"cve":"CVE-2026-34875","cvss":9.8,"epss":0.0006,"slug":"cve-2026-34875-mbed-tls-buffer-overflow-in-ffdh-public-key-export","title":"Mbed TLS buffer overflow in FFDH public key export","severity":"critical","exploited":false,"published_at":"2026-04-01T18:16:31.433+00:00","url":"https://junglewise.ai/threats/cve-2026-34875-mbed-tls-buffer-overflow-in-ffdh-public-key-export"},{"cve":"CVE-2026-25834","cvss":6.5,"epss":0.0002,"slug":"cve-2026-25834-mbed-tls-algorithm-downgrade-in-tls-1-2-client","title":"Mbed TLS algorithm downgrade in TLS 1.2 client","severity":"medium","exploited":false,"published_at":"2026-04-01T18:16:28.127+00:00","url":"https://junglewise.ai/threats/cve-2026-25834-mbed-tls-algorithm-downgrade-in-tls-1-2-client"},{"cve":"CVE-2025-49087","cvss":4,"epss":0.0043,"slug":"cve-2025-49087-mbed-tls-timing-side-channel-in-block-cipher-decryption-with-pkcs","title":"Mbed TLS timing side-channel in block cipher decryption with PKCS#7 padding","severity":"medium","exploited":false,"published_at":"2025-07-20T19:15:24.037+00:00","url":"https://junglewise.ai/threats/cve-2025-49087-mbed-tls-timing-side-channel-in-block-cipher-decryption-with-pkcs"},{"cve":"CVE-2025-49601","cvss":4.8,"epss":0.0026,"slug":"cve-2025-49601-mbed-tls-out-of-bounds-read-in-mbedtls-lms-import-public-key","title":"Mbed TLS out-of-bounds read in mbedtls_lms_import_public_key","severity":"medium","exploited":false,"published_at":"2025-07-04T15:15:22.467+00:00","url":"https://junglewise.ai/threats/cve-2025-49601-mbed-tls-out-of-bounds-read-in-mbedtls-lms-import-public-key"},{"cve":"CVE-2025-49600","cvss":4.9,"epss":0.0005,"slug":"cve-2025-49600-mbed-tls-signature-bypass-in-lms-verification","title":"Mbed TLS signature bypass in LMS verification","severity":"medium","exploited":false,"published_at":"2025-07-04T15:15:22.277+00:00","url":"https://junglewise.ai/threats/cve-2025-49600-mbed-tls-signature-bypass-in-lms-verification"}],"vendor":{"hub":true,"name":"TrustedFirmware","slug":"trustedfirmware","url":"https://junglewise.ai/threats/vendors/trustedfirmware"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-34877","cvss":9.8,"epss":0.0022,"slug":"cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl","title":"Mbed TLS memory corruption via insecure deserialization of SSL context","severity":"critical","exploited":false,"published_at":"2026-04-02T17:16:26.927+00:00","url":"https://junglewise.ai/threats/cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl"},{"cve":"CVE-2026-34875","cvss":9.8,"epss":0.0006,"slug":"cve-2026-34875-mbed-tls-buffer-overflow-in-ffdh-public-key-export","title":"Mbed TLS buffer overflow in FFDH public key export","severity":"critical","exploited":false,"published_at":"2026-04-01T18:16:31.433+00:00","url":"https://junglewise.ai/threats/cve-2026-34875-mbed-tls-buffer-overflow-in-ffdh-public-key-export"},{"cve":"CVE-2026-34873","cvss":9.1,"epss":0.0004,"slug":"cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption","title":"Mbed TLS client impersonation in TLS 1.3 session resumption","severity":"critical","exploited":false,"published_at":"2026-04-01T21:17:01.99+00:00","url":"https://junglewise.ai/threats/cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption"},{"cve":"CVE-2026-33317","cvss":8.7,"epss":0.0002,"slug":"cve-2026-33317-op-tee-out-of-bounds-read-and-write-in-pkcs-11-ta","title":"OP-TEE out-of-bounds read and write in PKCS#11 TA","severity":"high","exploited":false,"published_at":"2026-04-24T03:16:11.02+00:00","url":"https://junglewise.ai/threats/cve-2026-33317-op-tee-out-of-bounds-read-and-write-in-pkcs-11-ta"},{"cve":"CVE-2026-33662","cvss":7.5,"epss":0.001,"slug":"cve-2026-33662-op-tee-os-integer-underflow-in-rsassa-pkcs1-v1-5-encoding","title":"OP-TEE OS integer underflow in RSASSA-PKCS1-v1_5 encoding","severity":"high","exploited":false,"published_at":"2026-04-24T19:17:09.997+00:00","url":"https://junglewise.ai/threats/cve-2026-33662-op-tee-os-integer-underflow-in-rsassa-pkcs1-v1-5-encoding"},{"cve":"CVE-2026-34874","cvss":7.5,"epss":0.0008,"slug":"cve-2026-34874-mbed-tls-null-pointer-dereference-in-x-509-distinguished-name","title":"Mbed TLS NULL pointer dereference in X.509 distinguished name parsing","severity":"high","exploited":false,"published_at":"2026-04-01T19:16:33.39+00:00","url":"https://junglewise.ai/threats/cve-2026-34874-mbed-tls-null-pointer-dereference-in-x-509-distinguished-name"},{"cve":"CVE-2026-25833","cvss":7.5,"epss":0.0005,"slug":"cve-2026-25833-mbed-tls-buffer-underflow-in-x509-inet-pton-ipv6","title":"Mbed TLS buffer underflow in x509_inet_pton_ipv6","severity":"high","exploited":false,"published_at":"2026-04-01T19:16:28.53+00:00","url":"https://junglewise.ai/threats/cve-2026-25833-mbed-tls-buffer-underflow-in-x509-inet-pton-ipv6"},{"cve":"CVE-2026-34876","cvss":7.5,"epss":0.0003,"slug":"cve-2026-34876-mbed-tls-out-of-bounds-read-in-mbedtls-ccm-finish","title":"Mbed TLS out-of-bounds read in mbedtls_ccm_finish","severity":"high","exploited":false,"published_at":"2026-04-02T16:16:26.18+00:00","url":"https://junglewise.ai/threats/cve-2026-34876-mbed-tls-out-of-bounds-read-in-mbedtls-ccm-finish"},{"cve":"CVE-2026-54467","cvss":7,"epss":0.0017,"slug":"cve-2026-54467-trusted-firmware-m-mailbox-pointer-validation-vulnerability","title":"Trusted Firmware-M mailbox pointer validation vulnerability","severity":"high","exploited":false,"published_at":"2026-08-26T05:18:11.053+00:00","url":"https://junglewise.ai/threats/cve-2026-54467-trusted-firmware-m-mailbox-pointer-validation-vulnerability"},{"cve":"CVE-2026-25834","cvss":6.5,"epss":0.0002,"slug":"cve-2026-25834-mbed-tls-algorithm-downgrade-in-tls-1-2-client","title":"Mbed TLS algorithm downgrade in TLS 1.2 client","severity":"medium","exploited":false,"published_at":"2026-04-01T18:16:28.127+00:00","url":"https://junglewise.ai/threats/cve-2026-25834-mbed-tls-algorithm-downgrade-in-tls-1-2-client"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[]}