A vulnerability classified as problematic was found in Mbed TLS up to 3.6.3. This vulnerability affects the function
mbedtls_asn1_store_named_data
. The manipulation leads to null pointer dereference.
This vulnerability was named CVE-2025-48965. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.