GCVE - cpe:2.3:o:arm:trusted_firmware-a:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:arm:trusted_firmware-a:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Arm (`992f6a5c-1bc7-5785-a659-421ca2a38af9`)
Product	Trusted Firmware A (`e7cbed5b-0973-5b09-a691-6bb307930eb2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/arm-trusted-firmware`	purl2cpe	2026-06-01 10:16:53.841475
`pkg:deb/ubuntu/arm-trusted-firmware`	purl2cpe	2026-06-01 10:16:53.841477
`pkg:github/arm-software/arm-trusted-firmware`	purl2cpe	2026-06-01 10:16:53.841479
`pkg:github/trustedfirmware-a/trusted-firmware-a`	purl2cpe	2026-06-01 10:16:53.841480
`pkg:rpm/fedora/arm-trusted-firmware`	purl2cpe	2026-06-01 10:16:53.841482
`pkg:rpm/opensuse/arm-trusted-firmware`	purl2cpe	2026-06-01 10:16:53.841483

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-31339`	vulnerable	2026-06-08 06:04:42.748762	Details available MEDIUM (4.8) Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. Published: 2024-08-13T16:56:22.024Z Updated: 2024-08-15T15:18:21.699Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47630`	vulnerable	2026-06-08 05:50:40.839323	Details available Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state. Published: 2023-01-16T00:00:00.000Z Updated: 2025-04-08T20:26:30.379Z Open on db.gcve.eu Reference links https://www.trustedfirmware.org/news/ https://trustedfirmware-a.readthedocs.io/en/latest/security_advisories/security-advisory-tfv-10.html http://www.openwall.com/lists/oss-security/2023/01/16/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19440`	vulnerable	2026-06-08 05:11:15.748463	Details available ARM Trusted Firmware-A allows information disclosure. Published: 2019-01-29T23:00:00.000Z Updated: 2024-08-05T11:37:11.441Z Open on db.gcve.eu Reference links https://github.com/ARM-software/arm-trusted-firmware/pull/1710 https://github.com/ARM-software/arm-trusted-firmware/wiki/Trusted-Firmware-A-Security-Advisory-TFV-8	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.