CVE-2017-2784

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.

• CWE-295

• http://www.talosintelligence.com/reports/TALOS-2017-0274/Exploit, Technical Description, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201706-18
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01Mitigation, Vendor Advisory
• http://www.talosintelligence.com/reports/TALOS-2017-0274/Exploit, Technical Description, Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201706-18
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01Mitigation, Vendor Advisory

Published

Apr 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2778Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-2779An exploitable memory corruption vulnerability exists in the…7.5
• CVE-2017-2780An exploitable heap buffer overflow vulnerability exists in …9.8
• CVE-2017-2781An exploitable heap buffer overflow vulnerability exists in …9.8
• CVE-2017-2782An integer overflow vulnerability exists in the X509 certifi…6.5
• CVE-2017-2783An exploitable heap corruption vulnerability exists in the F…8.3
• CVE-2017-2785An exploitable buffer overflow exists in the psnotifyd appli…10
• CVE-2017-2786A denial of service vulnerability exists in the psnotifyd ap…7.5
• CVE-2017-2787A buffer overflows exists in the psnotifyd application of th…9
• CVE-2017-2788A buffer overflows exists in the psnotifyd application of th…10
• CVE-2017-2789When copying filedata into a buffer, JustSystems Ichitaro Of…8.8
• CVE-2017-2790When processing a record type of 0x3c from a Workbook stream…8.8