CVE-2022-48251

Published: Jan 10, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."

Affected (10)

Products: Arm: Cortex A53 Firmware, Cortex A55 Firmware, Cortex A57 Firmware, Cortex A72 Firmware, Cortex A73 Firmware, Cortex A75 Firmware, Cortex A76 Firmware, Cortex A76ae Firmware, Cortex A77 Firmware, Cortex A78 Firmware

10 products

Cortex A76ae Firmware

Cortex A77 Firmware

Cortex A78 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A53 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A53	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A55 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A55	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A57 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A57	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A72 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A72	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A73 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A73	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A75 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A75	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A76 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A76	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A76ae Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A76ae	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A77 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A77	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78	All versions

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (4)

https://eprint.iacr.org/2022/230

Source: cve@mitre.org

Technical DescriptionThird Party Advisory

https://eshard.com/posts/sca-attacks-on-armv8

Source: cve@mitre.org

ExploitThird Party Advisory

https://eprint.iacr.org/2022/230

Source: af854a3a-2127-422b-91ae-364da2661108

Technical DescriptionThird Party Advisory

https://eshard.com/posts/sca-attacks-on-armv8

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.