← Back

CVE-2024-10929

nvd nist
Published: Jan 22, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.5 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.

Affected (4)

Arm
4 products
Cortex A57 Firmware
Cortex A72 Firmware
Cortex A73 Firmware
Cortex A75 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex A57 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex A57
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex A72 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex A72
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex A73 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex A73
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex A75 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex A75
All versions

Related CWEs

CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (1)

Source: arm-security@arm.com
Vendor Advisory

Timeline

No history available yet.