8 matches found
EUVD-2024-48728
Malicious code in bioql PyPI...
CMSE secure state may leak from stack to floating-point registers
...
Huawei EulerOS: Security Advisory for llvm (EulerOS-SA-2025-1319)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-7883 CMSE secure state may leak from stack to floating-point registers
When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...
PT-2024-38657
Name of the Vulnerable Software and Affected Versions Arm Cortex-M Security Extensions CMSE affected versions not specified Description The issue allows Secure stack contents to be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that retur...
CVE-2024-0151
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...
CVE-2024-0151
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...
CVE-2024-0151
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...