Lucene search
+L

422 matches found

attackerkb
attackerkb
•added 2021/05/25 12:00 a.m.•60 views

CVE-2021-27562

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Valu...

5.5CVSS6.5AI score0.03093EPSS
SaveIn wildExploits0References3
OSV
OSV
•added 2021/05/21 4:15 a.m.•18 views

CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

7.5CVSS7.1AI score0.01774EPSS
SaveExploits1References3
NVD
NVD
•added 2021/05/21 4:15 a.m.•30 views

CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

7.5CVSS0.01774EPSS
SaveExploits1References3
Prion
Prion
•added 2021/05/21 4:15 a.m.•25 views

Memory corruption

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

5CVSS7.5AI score0.01774EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2021/05/21 4:15 a.m.•12 views

CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

7.5CVSS6.9AI score0.01774EPSS
SaveExploits1References4
Mend
Mend
•added 2021/05/21 3:10 a.m.•4 views

CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

8.7CVSS0.01774EPSS
SaveExploits1References3
CVE
CVE
•added 2021/05/21 3:10 a.m.•99 views

CVE-2021-32032

Trusted Firmware-M (TF-M) up to version 1.3.0 is affected by CVE-2021-32032. The issue arises when cleaning up memory for a multi-part cryptographic operation after a failure: the abort() path in the cryptographic library may fail to free internal resources, causing a memory leak. The CVE entry n...

7.5CVSS7.5AI score0.01774EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/05/21 3:10 a.m.•38 views

CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

7.7AI score0.01774EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/21 12:00 a.m.•7 views

CVE-2021-32032: Missing Release of Memory after Effective Lifetime

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...

7.5CVSS5.7AI score0.01774EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•18 views

Trusted Firmware-M 安全漏洞

Acorn Trusted Firmware-M TFM is an open source software from Acorn UK that runs in a hardware-isolated security environment and provides security services. A security vulnerability exists in Trusted Firmware-M version 1.3.0 and earlier versions, which can be exploited by an attacker to cause a...

7.5CVSS7.3AI score0.01774EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2021/03/15 12:00 a.m.•10 views

VulnCheck KEV: CVE-2021-27562

Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure NS world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment NSPE handler mode. This vulnerability affects...

5.5CVSS7AI score0.03093EPSS
SaveIn wildExploits0References6
Positive Technologies
Positive Technologies
•added 2021/02/26 12:00 a.m.•22 views

PT-2021-4942

Name of the Vulnerable Software and Affected Versions Arm Trusted Firmware-M versions M through 1.2 Description The issue is related to an out-of-bounds write in the implementation of the NSPE Non-secure Processing Environment mode in Arm Trusted Firmware-M. This can cause a system halt, overwrit...

6.6CVSS6.9AI score0.03093EPSS
SaveExploits0References11
NVD
NVD
•added 2020/11/18 10:15 p.m.•31 views

CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

6.8CVSS8.2AI score0.00297EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/18 10:15 p.m.•39 views

Design/Logic Flaw

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

4.6CVSS7.4AI score0.00297EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
•added 2020/11/18 9:12 p.m.•48 views

CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

7AI score0.00297EPSS
SaveExploits0References2
NVD
NVD
•added 2020/09/02 4:15 p.m.•21 views

CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS5.6AI score0.00384EPSS
SaveExploits0References6
OSV
OSV
•added 2020/09/02 4:15 p.m.•9 views

DEBIAN-CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS5.9AI score0.00384EPSS
SaveExploits0References1
OSV
OSV
•added 2020/09/02 4:15 p.m.•10 views

ALPINE-CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS6.8AI score0.00384EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/09/02 4:15 p.m.•115 views

CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS5.9AI score0.00384EPSS
SaveExploits0References12
Mend
Mend
•added 2020/09/02 12:00 a.m.•2 views

CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

6.8CVSS0.00384EPSS
SaveExploits0References11
Rows per page
Query Builder