CVE-2021-32032: Trustedfirmware Trusted Firmware-M

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.

Affected products

• Trustedfirmware Trusted Firmware-M: up to and including 1.3.0

Published 2021-05-21. Last modified 2026-06-17.