Arm vulnerabilities
162 vulnerabilities
Known vulnerabilities in Arm products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 105 products.
Products
50 of 105- Mbed Tls52 vulnerabilities
- Valhall Gpu Kernel Driver52 vulnerabilities
- Bifrost Gpu Kernel Driver33 vulnerabilities
- 5Th Gen Gpu Architecture Kernel Driver25 vulnerabilities
- Midgard Gpu Kernel Driver18 vulnerabilities
- Cortex A728 vulnerabilities
- Cortex A777 vulnerabilities
- Avalon Gpu Kernel Driver6 vulnerabilities
- Cortex A6 vulnerabilities
- Cortex A576 vulnerabilities
- Cortex A736 vulnerabilities
- Cortex A786 vulnerabilities
- Mbed6 vulnerabilities
- Mbed Os6 vulnerabilities
- Cortex A7105 vulnerabilities
- Cortex A755 vulnerabilities
- Cortex A765 vulnerabilities
- Cortex A78Ae5 vulnerabilities
- Cortex X15 vulnerabilities
- Cortex X25 vulnerabilities
- Neoverse N25 vulnerabilities
- Cortex A76Ae4 vulnerabilities
- Cortex X34 vulnerabilities
- Cortex X44 vulnerabilities
- Cortex X9254 vulnerabilities
- Mali Gpu Kernel Driver4 vulnerabilities
- Mbed Crypto4 vulnerabilities
- Neoverse N14 vulnerabilities
- 5Th Gen Gpu Architecture Userspace Driver3 vulnerabilities
- Arm Compiler3 vulnerabilities
- Arm Compiler For Embedded Fusa3 vulnerabilities
- Arm Compiler For Functional Safety3 vulnerabilities
- Bifrost Gpu Userspace Driver3 vulnerabilities
- C1 Premium3 vulnerabilities
- C1 Ultra3 vulnerabilities
- Cortex A78C3 vulnerabilities
- Ds Development Studio3 vulnerabilities
- Neoverse V33 vulnerabilities
- Neoverse V3AE3 vulnerabilities
- Neoverse V13 vulnerabilities
- Neoverse V23 vulnerabilities
- Neoverse V33 vulnerabilities
- Neoverse V3Ae3 vulnerabilities
- Scp3 vulnerabilities
- SCP3 vulnerabilities
- Valhall Gpu Userspace Driver3 vulnerabilities
- Adaptive Scalable Texture Compression Encoder2 vulnerabilities
- C1 Pro2 vulnerabilities
- Cortex A152 vulnerabilities
- Cortex A532 vulnerabilities
CVE-2018-1000520armmbed_tls+2
EPSS score0.80%
ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtls_ssl_get_verify_result() that can result in ECDSA-signed certificates are accepted, when only RSA-signed ones should be.. This attack appear to be exploitable via Peers negotiate a TLS-ECDH-RSA-* ciphersuite. Any of the peers can then provide an ECDSA-signed certificate, when only an RSA-signed one should be accepted..CVE-2018-19608alpinembedtls+5EPSS score0.34%
Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.CVE-2018-0488alpinembedtls+4EPSS score4.79%
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.CVE-2018-0487alpinembedtls+4EPSS score3.26%
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.CVE-2018-0497alpinembedtls+4EPSS score2.77%
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.CVE-2018-0498alpinembedtls+4EPSS score0.37%
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.CVE-2018-9989armmbed_tls+4EPSS score2.12%
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.CVE-2018-9988armmbed_tls+4EPSS score2.12%
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.CVE-2018-9056armcortex-a+208EPSS score0.67%
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.CVE-2018-3639alpinexen+557EPSS score60.63%
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVE-2018-3640armcortex-a+201EPSS score7.46%
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.CVE-2018-3693armcortex-a+244EPSS score8.63%
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.CVE-2021-26314amdall supported processors+8EPSS score0.61%
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.CVE-2021-26313amdall supported processors+9EPSS score0.33%
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.CVE-2021-36647armmbed_tls+3EPSS score0.16%
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.CVE-2021-43666armmbed_tls+3EPSS score2.07%
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.CVE-2021-43086armadaptive_scalable_texture_compression_encoder+1EPSS score1.25%
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in function compress_symbolic_block_for_partition_2planes() in "/Source/astcenc_compress_symbolic.cpp".CVE-2021-29256armbifrost_gpu_kernel_driver+2KEVEPSS score2.99%
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.CVE-2021-27435armmbedEPSS score1.86%
ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.CVE-2021-27433armmbed_ualloc+1EPSS score1.79%
ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.