Arm Adaptive Scalable Texture Compression Encoder vulnerabilities

2 CVEs affecting Arm Adaptive Scalable Texture Compression Encoder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44331, published 2022-02-28.

More from Arm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-43086, published 2022-02-28. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in…
• CVE-2021-44331, published 2022-02-28. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise().