Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
arm vulnerabilities and exploits
(subscribe to this query)
169
VMScore
CVE-2018-19608
Arm Mbed TLS prior to 2.14.1, prior to 2.7.8, and prior to 2.1.17 allows a local unprivileged malicious user to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.
Arm Mbed Tls
445
VMScore
CVE-2018-1000520
ARM mbedTLS version 2.7.0 and previous versions contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtls_ssl_get_verify_result() that can result in ECDSA-signed certificates are accepted, when only RSA-signed ones should be.. This attack appear to be...
Arm Mbed Tls
NA
CVE-2023-45199
Mbed TLS 3.2.x up to and including 3.4.x prior to 3.5 has a Buffer Overflow that can lead to remote Code execution.
Arm Mbed Tls
NA
CVE-2023-52353
An issue exists in Mbed TLS up to and including 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.
Arm Mbed Tls
641
VMScore
CVE-2020-16273
In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure app...
Arm Armv8-m Firmware
NA
CVE-2024-23170
An issue exists in Mbed TLS 2.x prior to 2.28.7 and 3.x prior to 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local malicious user to recover the plaintext. It requires the malicious user to send a large number of m...
Arm Mbed Tls
NA
CVE-2021-36647
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions prior to 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted opera...
Arm Mbed Tls
1 Github repository
NA
CVE-2024-23744
An issue exists in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
Arm Mbed Tls
392
VMScore
CVE-2017-7496
fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.
Fedoraproject Arm Installer
383
VMScore
CVE-2020-10941
Arm Mbed TLS prior to 2.16.5 allows malicious users to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
Arm Mbed Crypto
Arm Mbed Tls
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Debian Debian Linux 10.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »