CVE-2021-43619: Trustedfirmware Trusted Firmware-M

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.

Affected products

• Trustedfirmware Trusted Firmware-M: version 1.4.0 only; version 1.4.1 only

Published 2022-03-01. Last modified 2026-06-17.