Vulnerabilities (CVE)

Filtered by vendor Arm Subscribe
Filtered by product Arm Trusted Firmware
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-7564 1 Arm 1 Arm Trusted Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.
CVE-2017-7563 1 Arm 1 Arm Trusted Firmware 2024-11-21 6.8 MEDIUM 8.1 HIGH
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).