CVE-2018-9056: arm cortex-a
Vulnerability summary
CVE-2018-9056 is a medium (CVSS 5.6) vulnerability in arm cortex-a. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 51.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 27-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.67%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
0.00 pp
From 0.67% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (cs.ucr.edu)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Intel199 products
- atom_cc2308 | c2316 | c2338 | c2350 | c2358 | c2508 | c2516 | c2518 | c2530 | c2538 | c2550 | c2558 | c2718 | c2730 | c2738 | c2750 | c2758 | c3308 | c3338 | c3508 | c3538 | c3558 | c3708 | c3750 | c3758 | c3808 | c3830 | c3850 | c3858 | c3950 | c3955 | c3958
- atom_ee3805 | e3815 | e3825 | e3826 | e3827 | e3845
- atom_x3c3130 | c3200rk | c3205rk | c3230rk | c3235rk | c3265rk | c3295rk | c3405 | c3445
- atom_zz2420 | z2460 | z2480 | z2520 | z2560 | z2580 | z2760 | z3460 | z3480 | z3530 | z3560 | z3570 | z3580 | z3590 | z3735d | z3735e | z3735f | z3735g | z3736f | z3736g | z3740 | z3740d | z3745 | z3745d | z3770 | z3770d | z3775 | z3775d | z3785 | z3795
- celeron_jj1750 | j1800 | j1850 | j1900 | j3060 | j3160 | j3355 | j3455 | j4005 | j4105
Arm1 product
- cortex-a9 | 15 | 17 | 57 | 72 | 73 | 75
2 vendors · 200 products · Showing 200 of 209. Use Open JSON for the complete list.