CVE-2017-7564: Trustedfirmware Trusted Firmware-A

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.

Affected products

• Trustedfirmware Trusted Firmware-A: up to and including 1.3

Published 2017-06-07. Last modified 2026-06-17.