Arm c1-Pro Firmware vulnerabilities

2 CVEs affecting Arm c1-Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0995, published 2026-03-02.

More from Arm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-7881, published 2025-01-28. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced.
• CVE-2026-0995, published 2026-03-02. Low severity, CVSS 3.6. EPSS: 0.1% chance of exploitation in the next 30 days. An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.