Approved changes feed: RSS · Atom

cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*

part: a version: 6.16 update: *

VendorArm (992f6a5c-1bc7-5785-a659-421ca2a38af9)
ProductArm Compiler For Embedded Fusa (ff1f7c20-0cd9-5509-bfa1-4add7c4e9b30)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7883 vulnerable 2026-06-08 06:58:23.787369 CMSE secure state may leak from stack to floating-point registers
LOW (3.7)
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
Published: 2024-10-31T17:01:49.725Z
Updated: 2024-10-31T17:53:36.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43702 vulnerable 2026-06-08 05:49:33.850032 Incomplete verification of installation file signature
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Published: 2023-07-27T21:47:25.882Z
Updated: 2025-02-13T16:33:37.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43701 vulnerable 2026-06-08 05:49:33.842144 Insecure directory permissions on installer files
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Published: 2023-07-27T21:28:08.461Z
Updated: 2025-02-13T16:33:37.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.