CVE-2021-35465: arm china_star-mc1_firmware
Vulnerability summary
CVE-2021-35465 is a low (CVSS 3.6) vulnerability in arm china_star-mc1_firmware. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.1% of scored vulnerabilities.
Timeline
- 23-08-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Arm4 products
- china_star-mc1_firmwarena
- cortex-m33_firmware≥ r0p0, ≤ r1p0
- cortex-m35p_firmwarer0
- cortex-m55_firmware≥ r0p0, ≤ r1p0
1 vendor · 4 products
References
2 links- developer.arm.com/support/arm-security-updates/vlldm-instruction-security-vulnerabilityX Refsource CONFIRMVendor Advisory