CVE-2017-5753

MEDIUM

Intel Atom - Information Disclosure via Speculative Execution Side-Channel

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 12 public exploits for CVE-2017-5753. PoCs published by Multiple, qazbnm456, Eugnis.

AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2027-5753 (Spectre Variant 1), demonstrating a bounds-check bypass vulnerability via speculative execution. It reads privileged memory by leveraging side-channel timing attacks on CPU cache behavior.

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Exploits (12)

exploitdb WORKING POC
by Multiple · clocalmultiple
https://www.exploit-db.com/exploits/43427

This is a proof-of-concept exploit for CVE-2027-5753 (Spectre Variant 1), demonstrating a bounds-check bypass vulnerability via speculative execution. It reads privileged memory by leveraging side-channel timing attacks on CPU cache behavior.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPU architectures vulnerable to Spectre (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local code execution on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WRITEUP 3,480 stars
by qazbnm456 · poc
https://github.com/qazbnm456/awesome-cve-poc/tree/master/CVE-2017-5753.md

This repository provides a detailed writeup and references for CVE-2017-5753, a bounds check bypass vulnerability part of the Spectre attack. It includes links to PoCs and technical papers but does not contain direct exploit code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Complex
Reliability
Theoretical
Target: CPUs with speculative execution (Intel, AMD, ARM)
No auth needed
Prerequisites: Speculative execution support in CPU · Access to execute arbitrary code on target system
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 774 stars
by Eugnis · poc
https://github.com/Eugnis/spectre-attack

This is a working proof-of-concept for the Spectre attack (CVE-2017-5753), demonstrating how speculative execution can leak memory contents. The code reads a secret string from memory using side-channel techniques.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local execution environment
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WRITEUP 14 stars
by xbl3 · poc
https://github.com/xbl3/awesome-cve-poc_qazbnm456/tree/master/CVE-2017-5753.md

This repository provides a detailed writeup and references for CVE-2017-5753, a bounds check bypass vulnerability related to the Spectre attack. It includes links to external PoCs and technical papers but does not contain direct exploit code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Complex
Reliability
Theoretical
Target: CPUs with speculative execution (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Speculative execution support in CPU · Access to execute arbitrary code on the target system
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 12 stars
by 00052 · poc
https://github.com/00052/spectre-attack-example

This is a proof-of-concept exploit for CVE-2017-5753 (Spectre Variant 1), demonstrating a bounds check bypass attack to leak memory contents via speculative execution and cache timing side-channels. The code reads a secret string from memory by exploiting speculative execution to access out-of-bounds data.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre Variant 1 (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local code execution on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 8 stars
by ixtal23 · poc
https://github.com/ixtal23/spectreScope

This repository contains a functional proof-of-concept for the Spectre vulnerability (CVE-2017-5753), demonstrating speculative execution attacks to leak memory contents. It includes build scripts and a C++ implementation tested on multiple platforms.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: Intel/AMD/SPARC CPUs (various OSes)
No auth needed
Prerequisites: C++ compiler (GCC/Clang/Xcode/Oracle Solaris Studio/MSVC) · CMake · Git
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 4 stars
by EdwardOwusuAdjei · poc
https://github.com/EdwardOwusuAdjei/Spectre-PoC

This is a proof-of-concept exploit for CVE-2027-5753 (Spectre Variant 1), demonstrating a side-channel attack via speculative execution to leak memory contents. The code uses cache timing to infer values from a secret string.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre Variant 1 (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local code execution on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 1 stars
by albertleecn · poc
https://github.com/albertleecn/cve-2017-5753

This repository contains a proof-of-concept exploit for CVE-2017-5753 (Spectre), demonstrating speculative execution side-channel attacks on Intel architectures. The code includes assembly and C implementations to read memory bytes via cache timing attacks.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Complex
Reliability
Racy
Target: Intel CPUs (macOS/OSX)
No auth needed
Prerequisites: Intel CPU with speculative execution · macOS/OSX environment
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 1 stars
by pedrolucasoliva · poc
https://github.com/pedrolucasoliva/spectre-attack-demo

This is a functional proof-of-concept for CVE-2017-5753 (Spectre Variant 1), demonstrating a bounds check bypass exploit to leak memory contents via speculative execution side channels. The code reads arbitrary memory by training the branch predictor and measuring cache timing differences.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local code execution on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
gitlab WORKING POC
by Eugnis · poc
https://gitlab.com/Eugnis/spectre-attack

This repository contains a functional proof-of-concept exploit for CVE-2017-5753 (Spectre Variant 1), demonstrating a bounds check bypass attack to leak memory contents via speculative execution. The code includes a detailed implementation of the attack mechanism, including victim function manipulation and cache timing analysis.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: Intel CPUs (and other affected processors) with speculative execution
No auth needed
Prerequisites: Vulnerable CPU with speculative execution · Local execution environment
devstral-2 · analyzed Feb 23, 2026 Full analysis →
gitlab WORKING POC
by The-Real-TechLord · poc
https://gitlab.com/The-Real-TechLord/spectre-attack

This repository contains a functional proof-of-concept exploit for CVE-2017-5753 (Spectre Variant 1), demonstrating a bounds check bypass attack to leak memory contents via speculative execution. The code includes a victim function and analysis logic to read arbitrary memory bytes by exploiting CPU branch prediction and cache timing.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: vulnerable CPU with speculative execution · local code execution on the target system
devstral-2 · analyzed Feb 23, 2026 Full analysis →
nomisec WORKING POC
by sachinthaBS · poc
https://github.com/sachinthaBS/Spectre-Vulnerability-CVE-2017-5753-

This is a proof-of-concept exploit for CVE-2017-5753 (Spectre Variant 1), demonstrating a bounds-check bypass vulnerability via speculative execution. The code reads arbitrary memory by leveraging side-channel timing attacks on CPU cache behavior.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Complex
Reliability
Reliable
Target: CPUs vulnerable to Spectre (e.g., Intel, AMD, ARM)
No auth needed
Prerequisites: Vulnerable CPU architecture · Local execution context
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (66)

Core 66
Core References
Third Party Advisory x_refsource_confirm
http://nvidia.custhelp.com/app/answers/detail/a_id/4609
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3542-2/
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201810-06
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3540-2/
Patch, Third Party Advisory, Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3597-1/
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
Third Party Advisory x_refsource_confirm
http://nvidia.custhelp.com/app/answers/detail/a_id/4611
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en-us/advisories/vde-2018-002
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3580-1/
Third Party Advisory x_refsource_confirm
https://support.f5.com/csp/article/K91229003
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4188
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:0292
Third Party Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-254.html
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20180104-0001/
Third Party Advisory x_refsource_confirm
https://www.synology.com/support/security/Synology_SA_18_01
Third Party Advisory x_refsource_confirm
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/584653
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
https://www.kb.cert.org/vuls/id/180049
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en-us/advisories/vde-2018-003
Patch, Third Party Advisory x_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
Third Party Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3549-1/
Third Party Advisory x_refsource_confirm
https://support.citrix.com/article/CTX231399
Technical Description, Third Party Advisory x_refsource_misc
https://spectreattack.com/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040071
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102371
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3597-2/
Third Party Advisory x_refsource_confirm
http://nvidia.custhelp.com/app/answers/detail/a_id/4614
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3540-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/usn/usn-3516-1/
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/43427/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3541-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3541-2/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3542-1/
Third Party Advisory x_refsource_confirm
https://support.lenovo.com/us/en/solutions/LEN-18282
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
Third Party Advisory x_refsource_confirm
http://nvidia.custhelp.com/app/answers/detail/a_id/4613
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
Issue Tracking, Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Jun/36
Third Party Advisory x_refsource_confirm
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
Third Party Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
Vendor Advisory x_refsource_confirm
https://cdrdv2.intel.com/v1/dl/getContent/685359

Scores

CVSS v3 5.6
EPSS 0.9427
EPSS Percentile 99.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-203
Status published
Products (50)
arm/cortex-a12_firmware
arm/cortex-a15_firmware
arm/cortex-a17_firmware
arm/cortex-a57_firmware
arm/cortex-a72_firmware
arm/cortex-a73_firmware
arm/cortex-a75_firmware
arm/cortex-a76_firmware
arm/cortex-a77_firmware
arm/cortex-a78_firmware
... and 40 more
Published Jan 04, 2018
Tracked Since Feb 18, 2026