arm Vulnerability Advisory Catalog

Total 149 security vulnerabilities recorded for arm software and firmware.

← Back to All Vendors
CVE-2025-0050 MEDIUM
Component: 5th_gen_gpu_architecture_userspace_driver

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Use...

๐Ÿ“… 2025-04-07
CVSS 5.9 Dossier →
Component: mbed_tls

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose...

๐Ÿ“… 2025-03-25
CVSS 5.4 Dossier →
Component: mbed_tls

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TL...

๐Ÿ“… 2025-03-25
CVSS 5.4 Dossier →
Component: 5th_gen_gpu_architecture_kernel_driver

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged us...

๐Ÿ“… 2025-02-03
CVSS 7.8 Dossier →
CVE-2024-6790 MEDIUM
Component: 5th_gen_gpu_architecture_kernel_driver

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd ...

๐Ÿ“… 2025-02-03
CVSS 6.1 Dossier →
CVE-2024-7881 MEDIUM
Component: c1-premium_firmware

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents ...

๐Ÿ“… 2025-01-28
CVSS 5.1 Dossier →
Component: cortex-a57_firmware

In certain circumstances, an issue in Arm Cortex-A57,ย Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a w...

๐Ÿ“… 2025-01-22
CVSS 5.1 Dossier →
Component: scp_firmware

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash...

๐Ÿ“… 2025-01-14
CVSS 7.5 Dossier →
Component: scp_firmware

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash...

๐Ÿ“… 2025-01-14
CVSS 5.3 Dossier →
CVE-2024-5660 CRITICAL
Component: cortex-a710_firmware

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Corte...

๐Ÿ“… 2024-12-10
CVSS 9.8 Dossier →
Component: mbed

An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from it...

๐Ÿ“… 2024-11-20
CVSS 7.5 Dossier →
CVE-2024-48984 CRITICAL
Component: mbed_os

An issue was discovered in MBed OS 6.16.0. When parsing hci reports, the hci parsing software dynamically determines the length of a list of reports b...

๐Ÿ“… 2024-11-20
CVSS 9.8 Dossier →
Component: mbed

An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from it...

๐Ÿ“… 2024-11-20
CVSS 7.5 Dossier →
Component: mbed

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by read...

๐Ÿ“… 2024-11-20
CVSS 7.5 Dossier →
Component: mbed

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by read...

๐Ÿ“… 2024-11-20
CVSS 7.5 Dossier →
Component: mbed

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet header by lo...

๐Ÿ“… 2024-11-20
CVSS 7.5 Dossier →
Component: scp_firmware

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Applica...

๐Ÿ“… 2024-11-13
CVSS 8.0 Dossier →
Component: arm_compiler_for_embedded

When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secu...

๐Ÿ“… 2024-10-31
CVSS 3.7 Dossier →
Component: 5th_gen_gpu_architecture_kernel_driver

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driv...

๐Ÿ“… 2024-09-03
CVSS 7.8 Dossier →
Component: 5th_gen_gpu_architecture_kernel_driver

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driv...

๐Ÿ“… 2024-08-05
CVSS 7.8 Dossier →
Component: 5th_gen_gpu_architecture_kernel_driver

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driv...

๐Ÿ“… 2024-08-05
CVSS 7.8 Dossier →
Component: 5th_gen_gpu_architecture_firmware

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Archite...

๐Ÿ“… 2024-07-01
CVSS 7.8 Dossier →
Component: bifrost_gpu_kernel_driver

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improp...

๐Ÿ“… 2024-06-07
CVSS 7.8 Dossier →
CVE-2024-1395 MEDIUM
Component: 5th_gen_gpu_architecture_kernel_driver

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory proc...

๐Ÿ“… 2024-05-03
CVSS 6.7 Dossier →
Page 2 of 7 (149 Total Records)