Vulnerability Details CVE-2021-43619
Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
- https://developer.arm.com/support/arm-security-updates
- https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/
- https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/fwu_write_vulnerability.html
- https://www.trustedfirmware.org
- https://developer.arm.com/support/arm-security-updates
- https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/
- https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/fwu_write_vulnerability.html
- https://www.trustedfirmware.org
Products affected by CVE-2021-43619
-
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.4.0
-
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.4.1