PT-2018-5752

Name of the Vulnerable Software and Affected Versions: ARM Trusted Firmware versions prior to v1.5 Description: The issue concerns the potential leak of secure world timing information due to the PMCR EL0 register not being initialized or saved/restored properly. Recommendations: For ARM Trusted...

ARM Trusted Firmware Authentication Vulnerability

ARM Trusted Firmware is an implementation of multiple ARM interface standards. A security vulnerability exists in the BL1 FWU SMC handling code in ARM Trusted Firmware versions prior to 1.4. The vulnerability can be exploited by an attacker with the help of a specially crafted AArch32 image to...

CVE-2017-9607

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1platmemcheck protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an...

CVE-2017-9607

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1platmemcheck protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an...

CVE-2017-9607

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1platmemcheck protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an...

Integer overflow

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1platmemcheck protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an...

CVE-2017-9607

The CVE concerns the BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4. The vulnerability allows an attacker with a crafted AArch32 image to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection, and potentially cause a denial of service or other impact via an...

PT-2017-19066

Name of the Vulnerable Software and Affected Versions ARM Trusted Firmware versions prior to 1.4 Description The issue allows attackers to write arbitrary data to secure memory, bypass the bl1 plat mem check protection mechanism, cause a denial of service, or possibly have unspecified other impac...

ARM Trusted Firmware Denial of Service Vulnerability

ARM Trusted Firmware is a set of interface standards that provide an ARMv8-A secure software implementation. A security vulnerability exists in ARM Trusted Firmware versions 1.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

ARM Trusted Firmware MT_EXECUTE_NEVER Protection Mechanism Bypass Vulnerability

ARM Trusted Firmware is a set of interface standards that provide an ARMv8-A secure software implementation. A security vulnerability exists in ARM Trusted Firmware version 1.3. An attacker can exploit this vulnerability to bypass the MTEXECUTENEVER protection mechanism...

CVE-2017-7563

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MTEXECUTENEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits one bit versus two bits...

Authentication flaw

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service secure world panic via vectors involving debug exceptions and debug registers...

Code injection

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MTEXECUTENEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits one bit versus two bits...

CVE-2017-7563

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MTEXECUTENEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits one bit versus two bits...

CVE-2017-7564

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service secure world panic via vectors involving debug exceptions and debug registers...

CVE-2017-7564

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service secure world panic via vectors involving debug exceptions and debug registers...

CVE-2017-7564

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service secure world panic via vectors involving debug exceptions and debug registers...

CVE-2017-7563

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MTEXECUTENEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits one bit versus two bits...

CVE-2017-7564

Technical details about CVE-2017-7564 are not publicly provided in the supplied connected documents; the available information only restates a denial-of-service risk in ARM Trusted Firmware up to version 1.3. Monitor for updates.

CVE-2017-7563

In ARM Trusted Firmware 1.3, the RO memory at AArch64 Secure EL1 is always executable due to an inconsistency in execute-never bits (one vs two). This bypasses MT_EXECUTE_NEVER protection. Public sources in the connected records confirm the vulnerability in ARM Trusted Firmware 1.3 and describe t...