Lack of data validation In arm-trusted-firmware
Description
An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | - | ||
debian 13 | 2.12.1+dfsg-1 | ||
debian 14 | 2.12.1+dfsg-1 |
Aliases
1. 2. 3. 4. 5.