Skip to main content

Cortex A78 Firmware

3 CVEs product

Monthly

CVE-2022-23960 Mar 13, 00:15 MEDIUM PATCH This Month

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. Rated medium severity (CVSS 5.6).

Information Disclosure Debian Cortex A710 Firmware Cortex X2 Firmware Debian Linux +20
NVD
CVSS 3.1
5.6
EPSS
0.5%
CVE-2022-25368 Mar 10, 17:47 MEDIUM PATCH This Month

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Rated medium severity (CVSS 4.7).

Information Disclosure Cortex A710 Firmware Cortex X2 Firmware Neoverse N2 Firmware Cortex A57 Firmware +20
NVD
CVSS 3.1
4.7
EPSS
0.3%
CVE-2017-5753 Jan 04, 13:29 MEDIUM POC PATCH THREAT This Month

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Rated medium severity (CVSS 5.6). Public exploit code available and EPSS exploitation probability 94.3%.

Authentication Bypass Debian Oracle VMware Synology +317
NVD Exploit-DB VulDB
CVSS 3.1
5.6
EPSS
94.3%
Threat
5.4
EPSS 0% CVSS 5.6
MEDIUM PATCH This Month

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. Rated medium severity (CVSS 5.6).

Information Disclosure Debian Cortex A710 Firmware +22
NVD
EPSS 0% CVSS 4.7
MEDIUM PATCH This Month

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Rated medium severity (CVSS 4.7).

Information Disclosure Cortex A710 Firmware Cortex X2 Firmware +22
NVD
EPSS 94% 5.4 CVSS 5.6
MEDIUM POC PATCH THREAT This Month

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Rated medium severity (CVSS 5.6). Public exploit code available and EPSS exploitation probability 94.3%.

Authentication Bypass Debian Oracle +319
NVD Exploit-DB VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy