Trustedfirmware: >> Trusted Firmware-M >> 1.3.0 Security Vulnerabilities
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.
CVSS Score
4.7
EPSS Score
0.003
Published
2024-09-05
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.
CVSS Score
7.5
EPSS Score
0.018
Published
2021-05-21