CVE-2024-11864

CVE-2024-11864 affects ARM SCP-Firmware up to version 2.15.0. Specifically crafted SCMI messages sent to an SCP can trigger a Usage Fault, causing the SCP to crash. Connected sources consistently describe the impact as a crash due to SCMI message handling; no exploitable code paths or vectors are...

CVE-2024-11863

CVE-2024-11863 and CVE-2024-11864 describe a vulnerability in ARM SCP-Firmware where specially crafted SCMI messages sent to an SCP running firmware versions up to and including 2.15.0 can trigger a Usage Fault, crashing the SCP. The affected component is the SCP-Firmware stack; the root cause ci...

CVE-2024-9413

CVE-2024-9413 affects ARM SCP-Firmware, specifically SCP-Firmware releases 2.11.0–2.15.0. The root cause is improper error handling in the transport_message_handler, which could enable an Application Processor (AP) to trigger a buffer overflow in SCP firmware. Documented impact indicates high con...