CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-05-25
Arm Trusted Firmware-M (TF-M) Security Domain Bypass and Denial of Service Vulnerability (CVE-2021-27562)
[Affected Scope] Arm Trusted Firmware-M (TF-M) versions up to and including 1.2, deployed on IoT and embedded hardware
[Impact] Non-secure world (NSPE) attackers can trigger system halts, overwrite secure data, or leak sensitive secure domain information
[Mitigation] Upgrade the TF-M source code to a patched version (v1.3.0 or higher), rebuild, and flash the firmware