← Back

CVE-2024-7881

nvd nist
Published: Jan 28, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.5 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced.

Affected (9)

Arm
9 products
C1 Premium Firmware
C1 Pro Firmware
C1 Ultra Firmware
Cortex X3 Firmware
Cortex X4 Firmware
Cortex X925 Firmware
Neoverse V2 Firmware
Neoverse V3 Firmware
Neoverse V3ae Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C1 Premium Firmware
All versions
Running on/withPlatform Versions
Arm
C1 Premium
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C1 Pro Firmware
All versions
Running on/withPlatform Versions
Arm
C1 Pro
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C1 Ultra Firmware
All versions
Running on/withPlatform Versions
Arm
C1 Ultra
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex X3 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex X3
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex X4 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex X4
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cortex X925 Firmware
All versions
Running on/withPlatform Versions
Arm
Cortex X925
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Neoverse V2 Firmware
All versions
Running on/withPlatform Versions
Arm
Neoverse V2
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Neoverse V3 Firmware
All versions
Running on/withPlatform Versions
Arm
Neoverse V3
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Neoverse V3ae Firmware
All versions
Running on/withPlatform Versions
Arm
Neoverse V3ae
All versions

Related CWEs

CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (1)

Source: arm-security@arm.com
Vendor Advisory

Timeline

No history available yet.