MEDIUM

CVE-2021-27562

Trustedfirmware Trusted Firmware M 2021-05-25 CVSS v3.1
CVSS
5.5
KEV

Description

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.

Summary dbcve.org

In Arm Trusted Firmware M through 1.2, the Non-Secure World (NS world) can trigger improper behavior when calling secure functions under NSPE handler mode, potentially causing system halt, overwriting secure data, or exposing secure data through printing. This indicates a failure in secure/non-secure world boundary enforcement in the firmware's secure function call interface.

Mitigation

Update to the patched version of Arm Trusted Firmware M (1.2+). Review and validate secure function call paths from the NS world to ensure proper boundary enforcement and input validation are in place.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

3.09%
Probability of exploitation in next 30 days
87.2th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE