← Back

CVE-2024-7883

nvd nist
Published: Oct 31, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.2 / Impact: 1.4
Source: arm-security@arm.com (Secondary)

Description

When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

Affected (5)

4 products
Arm Compiler For Embedded
Arm Compiler For Embedded Fusa
Clang
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
From 6.6 to 6.23
Arm
Version 6.16
Version 6.21
Version 6.6
From 11.0.0 to 20.1.0

Timeline

No history available yet.