The following vulnerabilities were published for mbedtls.
CVE-2025-27809[0]:
| Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side,
| accepts servers that have trusted certificates for arbitrary
| hostnames unless the TLS client application calls
| mbedtls_ssl_set_hostname.
CVE-2025-27810[1]:
| Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of
| failed memory allocation or hardware errors, uses uninitialized
| stack memory to compose the TLS Finished message, potentially
| leading to authentication bypasses such as replays.