CVE-2022-48251: Arm Cortex-a53 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."

Affected products

• Arm Cortex-a53 Firmware: affected versions not specified
• Arm Cortex-a55 Firmware: affected versions not specified
• Arm Cortex-a57 Firmware: affected versions not specified
• Arm Cortex-a72 Firmware: affected versions not specified
• Arm Cortex-a73 Firmware: affected versions not specified
• Arm Cortex-a75 Firmware: affected versions not specified
• Arm Cortex-a76 Firmware: affected versions not specified
• Arm Cortex-a76ae Firmware: affected versions not specified
• Arm Cortex-a77 Firmware: affected versions not specified
• Arm Cortex-a78 Firmware: affected versions not specified

Published 2023-01-10. Last modified 2026-06-17.