Description
An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced.
Scores
CVSS v3
5.1
EPSS
0.0012
EPSS Percentile
31.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-203
Status
published
Products (9)
arm/c1-premium_firmware
arm/c1-pro_firmware
arm/c1-ultra_firmware
arm/cortex-x3_firmware
arm/cortex-x4_firmware
arm/cortex-x925_firmware
arm/neoverse-v2_firmware
arm/neoverse-v3_firmware
arm/neoverse-v3ae_firmware
Published
Jan 28, 2025
Tracked Since
Feb 18, 2026