diff --git a/arm-env.sh b/arm-env.sh
index 1152578..635c52e 100644
--- a/arm-env.sh
+++ b/arm-env.sh
@@ -25,7 +25,7 @@
 tf_for_scp_tools_src_repo_url="https://gerrit.oss.arm.com/scp/test-framework"
 
 # If not set, the OpenCI would download the tarball from Github every time.
-mbedtls_archive="${mbedtls_archive:-$tfa_downloads/mbedtls/mbedtls-2.18.0.tar.gz}"
+mbedtls_archive="${mbedtls_archive:-$tfa_downloads/mbedtls/mbedtls-2.24.0.tar.gz}"
 
 # Arm Coverity server.
 export coverity_host="${coverity_host:-coverity.cambridge.arm.com}"
diff --git a/script/tf-coverity/common-def.sh b/script/tf-coverity/common-def.sh
index e92bba7..c4ceabc 100644
--- a/script/tf-coverity/common-def.sh
+++ b/script/tf-coverity/common-def.sh
@@ -12,7 +12,7 @@
 
 # mbed TLS source tag to checkout when building Trusted Firmware with Trusted
 # Board Boot support.
-MBED_TLS_SOURCES_TAG="mbedtls-2.18.0"
+MBED_TLS_SOURCES_TAG="mbedtls-2.24.0"
 
 ARMCLANG_PATH=/arm/warehouse/Distributions/FA/ARMCompiler/6.8/25/standalone-linux-x86_64-rel/bin/armclang
 CRYPTOCELL_LIB_PATH=/arm/projectscratch/ssg/trusted-fw/dummy-crypto-lib
diff --git a/utils.sh b/utils.sh
index 2464760..87129fa 100644
--- a/utils.sh
+++ b/utils.sh
@@ -318,10 +318,10 @@
 linaro_release="${linaro_release:-$linaro_1906_release}"
 
 # mbedTLS archive public hosting available at github.com
-mbedtls_archive="${mbedtls_archive:-https://github.com/ARMmbed/mbedtls/archive/mbedtls-2.18.0.tar.gz}"
-# The tar file contains mbedtls-mbedtls-2.18.0 repo which holds the necessary
+mbedtls_archive="${mbedtls_archive:-https://github.com/ARMmbed/mbedtls/archive/mbedtls-2.24.0.tar.gz}"
+# The tar file contains mbedtls-mbedtls-2.24.0 repo which holds the necessary
 # source files of mbedTLS project
-mbedtls_repo_name="${mbedtls_repo_name:-mbedtls-mbedtls-2.18.0}"
+mbedtls_repo_name="${mbedtls_repo_name:-mbedtls-mbedtls-2.24.0}"
 
 coverity_path="${coverity_path:-${nfs_volume}/tools/coverity/static-analysis/2019.09}"
 coverity_default_checkers=(