CVE-2017-7563

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism

published June 7, 2017

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00889 · 58.7th percentile
Published
2017-06-07T15:00Z
EPSS history
Timeline
  • 07 JUN 15:00Z
    In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism
    cvelistv5