Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0151

Опубликовано: 24 апр. 2024
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state.

EPSS

Процентиль: 33%
0.00133
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-241

Связанные уязвимости

CVSS3: 7.9
redhat
почти 2 года назад

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state.

CVSS3: 6.5
github
почти 2 года назад

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state due.

EPSS

Процентиль: 33%
0.00133
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-241