CVE-2017-9607

2017-09-2016:00:00

mitre

www.cve.org

0.001 Low

EPSS

Percentile

30.5%

JSON

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an integer overflow.