Trustedfirmware Trusted Firmware-a — known CVE vulnerabilities

Every CVE whose affected-product data names Trustedfirmware Trusted Firmware-a, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2017-7563 — CVSS 8.1 (high): In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER…
• CVE-2017-7564 — CVSS 7.5 (high): In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of…
• CVE-2017-15031 — CVSS 7.5 (high): In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak…
• CVE-2022-47630 — CVSS 7.4 (high): Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of…
• CVE-2017-9607 — CVSS 7.0 (high): The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the…
• CVE-2018-19440 — CVSS 5.3 (medium): ARM Trusted Firmware-A allows information disclosure.
• CVE-2023-31339 — CVSS 4.8 (medium): Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to…