Arm Cortex-a53 Firmware vulnerabilities

2 CVEs affecting Arm Cortex-a53 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-48251, published 2023-01-10.

More from Arm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-48251, published 2023-01-10. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side…
• CVE-2020-13844, published 2020-06-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via…