CVE-2023-31339

CVE-2023-31339 concerns improper input validation in ARM Trusted Firmware used in AMD Zynq UltraScale+ MPSoC/RFSoC. The vulnerability could allow a privileged attacker to perform out-of-bounds reads, potentially causing data leakage and denial of service. Affected component is the ARM Trusted Fir...

CVE-2022-47630

CVE-2022-47630: Trusted Firmware-A up to version 2.8 contains an out-of-bounds read in the X.509 boot certificate parser (affecting get_ext and auth_nvctr). Documented impact includes dangerous read side effects and potential leakage of microarchitectural state. Publicly noted fixes exist for 2.8...

CVE-2017-15031

The vulnerability concerns ARM Trusted Firmware up to v1.4. The issue stems from not initializing or saving/restoring the PMCR_EL0 register, which can leak secure world timing information. Affected component: ARM Trusted Firmware (versions up to 1.4). Impact: information disclosure via timing dat...

CVE-2017-7564

Technical details about CVE-2017-7564 are not publicly provided in the supplied connected documents; the available information only restates a denial-of-service risk in ARM Trusted Firmware up to version 1.3. Monitor for updates.

CVE-2018-19440

CVE-2018-19440 affects ARM Trusted Firmware-A, with the vulnerability described as information disclosure. Public details consistently identify the affected component as ARM Trusted Firmware-A and report potential confidentiality impact, aligning with CVSS data that lists partial confidentiality ...

CVE-2017-7563

In ARM Trusted Firmware 1.3, the RO memory at AArch64 Secure EL1 is always executable due to an inconsistency in execute-never bits (one vs two). This bypasses MT_EXECUTE_NEVER protection. Public sources in the connected records confirm the vulnerability in ARM Trusted Firmware 1.3 and describe t...

CVE-2017-9607

The CVE concerns the BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4. The vulnerability allows an attacker with a crafted AArch32 image to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection, and potentially cause a denial of service or other impact via an...