Out-of-bounds read In arm-trusted-firmware
Description
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 2.9.0+dfsg-3 | ||
debian 12 | - | ||
debian 13 | 2.9.0+dfsg-3 |
Aliases
1. 2. 3. 4. 5.