CVE-2020-13844: Arm Cortex-a32 Firmware

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

Affected products

• Arm Cortex-a32 Firmware: affected versions not specified
• Arm Cortex-a34 Firmware: affected versions not specified
• Arm Cortex-a35 Firmware: affected versions not specified
• Arm Cortex-a53 Firmware: affected versions not specified
• Arm Cortex-a57 Firmware: affected versions not specified
• Arm Cortex-a72 Firmware: affected versions not specified
• Arm Cortex-a73 Firmware: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-06-08. Last modified 2026-06-17.