CVE-2018-3640: Arm Cortex-A

Medium severity, CVSS 5.6. EPSS: 7.5% chance of exploitation in the next 30 days.

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Affected products

  • Arm Cortex-A: version 15 only; version 57 only; version 72 only
  • Intel Atom C: version c2308 only; version c3308 only; version c3338 only; version c3508 only; version c3538 only; version c3558 only; …
  • Intel Atom E: version e3805 only; version e3815 only; version e3825 only; version e3826 only; version e3827 only; version e3845 only
  • Intel Atom Z: version z2420 only; version z2460 only; version z2480 only; version z2520 only; version z2560 only; version z2580 only; …
  • Intel Celeron J: version j3455 only; version j4005 only; version j4105 only
  • Intel Celeron N: version n3450 only
  • Intel Core i3: version 32nm only; version 45nm only
  • Intel Core i5: version 32nm only; version 45nm only
  • Intel Core i7: version 32nm only; version 45nm only
  • Intel Core M: version 32nm only; version 45nm only
  • Intel Pentium: version n4000 only; version n4100 only; version n4200 only
  • Intel Pentium J: version j4205 only
  • Intel Pentium Silver: version j5005 only; version n5000 only
  • Intel Xeon E-1105c: affected versions not specified
  • Intel Xeon e3: version 125c_ only; version 1220_ only; version 1275_ only; version 1505m_v6 only; version 1515m_v5 only; version 1535m_v5 only; …
  • Intel Xeon e3 1105c v2: affected versions not specified
  • Intel Xeon e3 1125c v2: affected versions not specified
  • Intel Xeon e3 12201: affected versions not specified
  • Intel Xeon e3 12201 v2: affected versions not specified
  • Intel Xeon e3 1220 v2: affected versions not specified
  • Intel Xeon e3 1220 v3: affected versions not specified
  • Intel Xeon e3 1220 v5: affected versions not specified
  • Intel Xeon e3 1220 v6: affected versions not specified
  • Intel Xeon e3 1220l v3: affected versions not specified
  • Intel Xeon e3 1225: affected versions not specified
  • and 174 more

Published 2018-05-22. Last modified 2026-06-17.