A vulnerability described as problematic has been identified in mbed TLS up to 3.6.5/4.0.0. Impacted is an unknown function. The manipulation results in null pointer dereference.

This vulnerability is cataloged as CVE-2026-34874. The attack may be launched remotely. There is no exploit available.