{"id":"CVE-2024-7881","state":"PUBLISHED","title":"An unprivileged context can trigger a data","description":"An unprivileged context can trigger a data\nmemory-dependent prefetch engine to fetch the contents of a privileged location\nand consume those contents as an address that is also dereferenced.","publishedAt":"2025-01-28T15:01:44.445Z","updatedAt":"2025-11-18T13:14:02.578Z","severity":{"score":5.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"CISA-ADP"},"assigner":"Arm","products":["Arm Neoverse V2","Arm Neoverse V3","Arm Neoverse V3AE","Arm Cortex-X3","Arm Cortex-X4","Arm Cortex-X925","Arm C1-Pro","Arm C1-Ultra","Arm C1-Premium"],"affected":[{"vendor":"Arm","product":"Neoverse V2","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Neoverse V3","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Neoverse V3AE","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X3","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X4","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X925","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Ultra","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]}],"references":["https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-7881"],"weaknesses":["CWE-1422"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7881.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-7881","state":"PUBLISHED","datePublished":"2025-01-28T15:01:44.445Z","dateUpdated":"2025-11-18T13:14:02.578Z","assignerShortName":"Arm","assignerOrgId":"56a131ea-b967-4a0d-a41e-5f3549952846","dateReserved":"2024-08-16T13:57:21.218Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An unprivileged context can trigger a data\nmemory-dependent prefetch engine to fetch the contents of a privileged location\nand consume those contents as an address that is also dereferenced."}],"affected":[{"vendor":"Arm","product":"Neoverse V2","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Neoverse V3","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Neoverse V3AE","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X3","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X4","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"Cortex-X925","defaultStatus":"affected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Ultra","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"Arm","product":"C1-Premium","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]}],"references":[{"url":"https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-7881"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1422","description":"CWE-1422: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Arm","orgId":"56a131ea-b967-4a0d-a41e-5f3549952846","dateUpdated":"2025-11-18T13:14:02.578Z"},"datePublic":"2025-01-28T14:00:00.000Z","source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-01-28T17:06:36.950614Z","id":"CVE-2024-7881","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-06T15:41:50.704Z"}}]}}}