CVE-2024-7883
CMSE secure state may leak from stack to floating-point registers
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
CMSE secure state may leak from stack to floating-point registers
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
Reserved 2024-08-16 | Published 2024-10-31 | Updated 2024-10-31 | Assigner ArmCWE-226 Sensitive Information in Resource Not Removed Before Reuse
developer.arm.com/...tex-M Security Extensions Vulnerability
Support options
