CVE-2017-15031: Trustedfirmware Trusted Firmware-A

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information.

Affected products

• Trustedfirmware Trusted Firmware-A: up to and including 2.1

Published 2018-12-18. Last modified 2026-06-17.