Vulnerability Spotlight: ARM Mbedtls x509 ECDSA invalid public key Code Execution Vulnerability

Summary: Talos disclosed TALOS-2017-0274/CVE-2017-2784, a code execution vulnerability in ARM MbedTLS, the SSL/TLS implementation formerly known as PolarSSL that targets embedded devices. The flaw sits in the code handling elliptic curve cryptography keys: a specially crafted x509 certificate causes the application to fail to properly parse the public key, resulting in an invalid free of a stack pointer.
Bottom line: The memory pointed to is zeroed shortly before the vulnerability triggers, but because MbedTLS is built for embedded platforms that may lack modern heap exploitation mitigations, code execution may be achievable in certain circumstances.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2017-2784
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026