Integer overflow

2017-04-0615:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.7%

JSON

In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overflows. This affects certain cases involving execution of both AArch64 Generic Trusted Firmware (TF) BL1 code and other firmware update code.

CPENameOperatorVersion
arm_trusted_firmwareeq1.3
arm_trusted_firmwareeq1.2

CPE	Name	Operator	Version
	arm_trusted_firmware	eq	1.3
	arm_trusted_firmware	eq	1.2

References

github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-1