Trustedfirmware: >> Trusted Firmware-M >> 1.1 Security Vulnerabilities
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.
CVSS Score
4.7
EPSS Score
0.003
Published
2024-09-05
CVE-2021-27562
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.
Known exploited
CVSS Score
5.5
EPSS Score
0.031
Published
2021-05-25
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.
CVSS Score
7.5
EPSS Score
0.018
Published
2021-05-21