Lucene search
K
ArmCortex-a77 Firmware

6 matches found

CVE
CVE
added 2018/01/04 1:0 p.m.1148 views

CVE-2017-5753

CVE-2017-5753 is part of the Spectre family (Variant 1) described in the SPECTRE_MELTDOWN_ADVISORY: it involves speculative execution and a bounds-check bypass that can enable an unprivileged attacker to read privileged memory via cache timing analysis. IBM’s AIX/VIOS advisories and iFixes addres...

5.6CVSS6.1AI score0.93838EPSS
CVE
CVE
added 2022/03/12 11:57 p.m.511 views

CVE-2022-23960

CVE-2022-23960 affects Arm Cortex and Neoverse processors. It is a Spectre-BHB side-channel issue where shared branch history in the Branch History Buffer can influence mispredicted branches, enabling potential information disclosure through cache allocation. Documents note mitigations include de...

5.6CVSS6.4AI score0.00495EPSS
CVE
CVE
added 2024/12/10 1:55 p.m.138 views

CVE-2024-5660

CVE-2024-5660 : Affected hardware includes ARM Cortex-A77/A78/A78C/A78AE, Cortex-A710, Cortex-X1/X1C/X2/X3/X4, Cortex-X925, Neoverse V1/V2/V3/V3AE, and Neoverse N2. The issue arises from the use of Hardware Page Aggregation (HPA) and Stage-1/Stage-2 translation, which may permit bypassing Stage-2...

9.8CVSS9.6AI score0.00555EPSS
CVE
CVE
added 2022/03/09 6:17 p.m.115 views

CVE-2022-25368

CVE-2022-23960 describes Spectre-BHB: an attack on ARM Cortex and Neoverse CPUs that abuse the Branch History Buffer (BHB) to influence mispredicted branches, enabling a cache-related side-channel and potential information disclosure across security contexts. Affected: ARM Cortex and Neoverse pro...

4.7CVSS4.8AI score0.00294EPSS
CVE
CVE
added 2023/12/08 8:54 p.m.88 views

CVE-2023-34320

CVE-2023-34320 affects Cortex-A77 cores (r0p0 and r1p0) due to erratum 1508412. Under certain circumstances, software executing a load to device or non-cacheable memory and either a store-exclusive or register read of PAR_EL1 could cause a core deadlock when the operations occur in close proximit...

5.5CVSS5.7AI score0.00218EPSS
CVE
CVE
added 2023/01/10 12:0 a.m.59 views

CVE-2022-48251

CVE-2022-48251 concerns ARMv8 AES instructions, which are described as lacking an algorithm that is intrinsically resistant to power-side-channel attacks. Multiple sources reiterate that power-side-channel attacks are possible but not directly caused by or related to ARM architecture, with no spe...

7.5CVSS7.5AI score0.00828EPSS