Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-0151

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arm

Description

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arm Arm v8-M Security Extensions Requirements on Development Tools

Default version status: unaffected

  • 1.0 to < 1.4affected

References