Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
arm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-34970
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already...
Arm Valhall Gpu Kernel Driver R44p0
Arm Mali Gpu Kernel Driver R44p0
5
CVSSv2
CVE-2021-45450
In Mbed TLS prior to 2.28.0 and 3.x prior to 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Arm Mbed Tls 3.0.0
Arm Mbed Tls
Fedoraproject Fedora 36
Fedoraproject Fedora 37
4.9
CVSSv2
CVE-2021-27562
In Arm Trusted Firmware M up to and including 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.
Arm Trusted Firmware M
NA
CVE-2023-26084
The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib prior to 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable.
Arm Aarch64cryptolib
5
CVSSv2
CVE-2018-9988
ARM mbed TLS prior to 2.1.11, prior to 2.7.2, and prior to 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.
Arm Mbed Tls
Arm Mbed Tls 2.8.0
Debian Debian Linux 8.0
Debian Debian Linux 9.0
5
CVSSv2
CVE-2018-9989
ARM mbed TLS prior to 2.1.11, prior to 2.7.2, and prior to 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
Arm Mbed Tls
Arm Mbed Tls 2.8.0
Debian Debian Linux 8.0
Debian Debian Linux 9.0
NA
CVE-2023-45199
Mbed TLS 3.2.x up to and including 3.4.x prior to 3.5 has a Buffer Overflow that can lead to remote Code execution.
Arm Mbed Tls
NA
CVE-2024-23744
An issue exists in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
Arm Mbed Tls
NA
CVE-2024-23775
Integer Overflow vulnerability in Mbed TLS 2.x prior to 2.28.7 and 3.x prior to 3.5.2, allows malicious users to cause a denial of service (DoS) via mbedtls_x509_set_extension().
Arm Mbed Tls
4.3
CVSSv2
CVE-2020-36477
An issue exists in Mbed TLS prior to 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name i...
Arm Mbed Tls
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »