CVE-2024-11863

MEDIUM

SCP-Firmware <2.15.0 - DoS

Title source: llm

Description

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP

References (1)

[Vendor Advisory] https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability%20CVE-2024-11863-11864

Scores

CVSS v3 5.3

EPSS 0.0027

EPSS Percentile 50.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-755

Status published

Affected Products (1)

arm/scp_firmware < 2.16.0

Timeline

Published Jan 14, 2025

Tracked Since Feb 18, 2026