Approved changes feed: RSS · Atom

cpe:2.3:a:arm:arm_trusted_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArm (992f6a5c-1bc7-5785-a659-421ca2a38af9)
ProductArm Trusted Firmware (6ef4d63d-f7c0-5c16-97a7-0bf025fea5b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7564 vulnerable 2026-06-08 05:09:56.555102 Details available
In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.
Published: 2017-06-07T15:00:00.000Z
Updated: 2024-08-05T16:04:11.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7563 vulnerable 2026-06-08 05:09:56.554596 Details available
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).
Published: 2017-06-07T15:00:00.000Z
Updated: 2024-08-05T16:04:12.016Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.