arm Vulnerability Advisory Catalog

Total 149 security vulnerabilities recorded for arm software and firmware.

← Back to All Vendors
Component: arm_development_studio

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being ...

📅 2023-07-27
CVSS 7.8 Dossier →
Component: arm_compiler

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer...

📅 2023-07-27
CVSS 7.8 Dossier →
Component: arm_compiler

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to...

📅 2023-07-27
CVSS 7.8 Dossier →
Component: nn_android_neural_networks_driver

A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02....

📅 2023-06-29
CVSS 7.8 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already...

📅 2023-06-02
CVSS 5.5 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already...

📅 2023-06-02
CVSS 5.5 Dossier →
Component: avalon_android_gralloc_module

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affect...

📅 2023-04-11
CVSS 3.3 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited am...

📅 2023-04-11
CVSS 3.3 Dossier →
Component: 5th_gen_gpu_architecture_kernel_driver

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all version...

📅 2023-04-06
CVSS 3.3 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limite...

📅 2023-04-06
CVSS 3.3 Dossier →
Component: aarch64cryptolib

The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading ...

📅 2023-03-15
CVSS 3.7 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already...

📅 2023-03-08
CVSS 8.8 Dossier →
Component: avalon_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already...

📅 2023-03-06
CVSS 8.8 Dossier →
Component: mbed_tls

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.2...

📅 2023-01-17
CVSS 4.7 Dossier →
Component: bifrost_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operation...

📅 2023-01-17
CVSS 8.8 Dossier →
Component: cortex-a53_firmware

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor report...

📅 2023-01-10
CVSS 7.5 Dossier →
CVE-2022-46393 CRITICAL
Component: mbed_tls

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-rea...

📅 2022-12-15
CVSS 9.8 Dossier →
Component: mbed_tls

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (...

📅 2022-12-15
CVSS 5.3 Dossier →
Component: valhall_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operation...

📅 2022-12-12
CVSS 8.8 Dossier →
Component: utgard_gpu_kernel_driver

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gai...

📅 2022-11-23
CVSS 7.5 Dossier →
Component: valhall_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to...

📅 2022-11-08
CVSS 8.8 Dossier →
Component: bifrost_gpu_kernel_driver

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p...

📅 2022-10-25
CVSS 8.8 Dossier →
Component: bifrost_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already...

📅 2022-09-01
CVSS 6.5 Dossier →
Component: valhall_gpu_kernel_driver

An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make improper GPU processing operat...

📅 2022-08-02
CVSS 5.5 Dossier →
Page 4 of 7 (149 Total Records)