CVE-2021-43619

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition

published March 1, 2022

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Published
2022-03-01T04:31Z
EPSS history
Timeline
  • 01 MAR 04:31Z
    Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition
    cvelistv5