Arm Cortex-a57 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Arm Cortex-a57 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-48251 — CVSS 7.5 (high): The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the…
• CVE-2017-5753 — CVSS 5.6 (medium): Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an…
• CVE-2022-23960 — CVSS 5.6 (medium): Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can…
• CVE-2020-13844 — CVSS 5.5 (medium): Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized…
• CVE-2024-10929 — CVSS 5.1 (medium): In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary…
• CVE-2022-25368 — CVSS 4.7 (medium): Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence…