CVE-2024-45557CWE-823

Use of Out-of-range Pointer Offset in Trust Management Engine

High · published April 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00107 · 1.1th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2025-04-07T10:15Z
EPSS history
Timeline
  • 07 APR 10:15Z
    Use of Out-of-range Pointer Offset in Trust Management Engine
    cvelistv5