diff --git a/ChangeLog.d/1351_lms_overread.txt b/ChangeLog.d/1351_lms_overread.txt
new file mode 100644
index 0000000000..43249f70a5
--- /dev/null
+++ b/ChangeLog.d/1351_lms_overread.txt
@@ -0,0 +1,3 @@
+Security
+   * Fix a buffer overread in mbedtls_lms_import_public_key() when the input is
+     less than 3 bytes. Reported by Linh Le and Ngan Nguyen from Calif.