TrustedFirmware kayıtları
trustedfirmware üreticisine ait 85 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %1,2
- Silahlaştırılmış
- 1 · %1,2
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %49,4
- Yayından KEV’e ortanca
- 162 gün
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read8
- CWE-190 Integer Overflow or Wraparound7
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-787 Out-of-bounds Write5
- CWE-20 Improper Input Validation4
- CWE-121 Stack-based Buffer Overflow4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
85 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
53Planlayın | CVE-2021-27562Silahlaştırılmış | In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure datrustedfirmware · trusted firmware-m · CWE-787 | Orta5,5 | KEV | %3,1 | 25 May 2021 |
40Planlayın | CVE-2019-1010298Kavram kanıtı | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.trustedfirmware · op-tee · CWE-190 | Kritik9,8 | — | %3,9 | 15 Tem 2019 |
40Planlayın | CVE-2019-1010296İstismar yok | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.trustedfirmware · op-tee · CWE-190 | Kritik9,8 | — | %2,8 | 15 Tem 2019 |
40Planlayın | CVE-2019-1010297İstismar yok | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.trustedfirmware · op-tee · CWE-190 | Kritik9,8 | — | %2,7 | 15 Tem 2019 |
40Planlayın | CVE-2021-44732İstismar yok | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.arm · mbed tls · CWE-415 | Kritik9,8 | — | %2,6 | 20 Ara 2021 |
39İzleyin | CVE-2019-1010295İstismar yok | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.trustedfirmware · op-tee · CWE-20 | Kritik9,8 | — | %1,6 | 15 Tem 2019 |
39İzleyin | CVE-2019-1010293İstismar yok | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing.trustedfirmware · op-tee · CWE-787 | Kritik9,8 | — | %1,6 | 15 Tem 2019 |
39İzleyin | CVE-2019-1010292İstismar yok | Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks.trustedfirmware · op-tee · CWE-787 | Kritik9,8 | — | %1,6 | 16 Tem 2019 |
39İzleyin | CVE-2022-46393İstismar yok | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0.arm · mbed tls · CWE-125 | Kritik9,8 | — | %1,2 | 15 Ara 2022 |
39İzleyin | CVE-2023-45199İstismar yok | Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.trustedfirmware · mbed tls · CWE-120 | Kritik9,8 | — | %1,1 | 6 Eki 2023 |
39İzleyin | CVE-2024-45746İstismar yok | An issue was discovered in Trusted Firmware-M through 2.1.0.CWE-120 | Kritik9,8 | — | %0,8 | 9 Eki 2024 |
39İzleyin | CVE-2026-34877İstismar yok | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.arm · mbed tls · CWE-250 | Kritik9,8 | — | %0,7 | 2 Nis 2026 |
39İzleyin | CVE-2024-45158İstismar yok | An issue was discovered in Mbed TLS 3.6 before 3.6.1.trustedfirmware · mbed tls · CWE-121 | Kritik9,8 | — | %0,7 | 5 Eyl 2024 |
39İzleyin | CVE-2024-49195İstismar yok | Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pairtrustedfirmware · mbed tls · CWE-787 | Kritik9,8 | — | %0,6 | 15 Eki 2024 |
39İzleyin | CVE-2026-34875İstismar yok | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.trustedfirmware · mbed tls · CWE-120 | Kritik9,8 | — | %0,6 | 1 Nis 2026 |
39İzleyin | CVE-2024-45159İstismar yok | An issue was discovered in Mbed TLS 3.x before 3.6.1.trustedfirmware · mbed tls · CWE-295 | Kritik9,8 | — | %0,4 | 5 Eyl 2024 |
37İzleyin | CVE-2022-35409İstismar yok | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.arm · mbed tls · CWE-125 | Kritik9,1 | — | %2,2 | 15 Tem 2022 |
36İzleyin | CVE-2019-25052İstismar yok | In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions diretrustedfirmware · op-tee · CWE-327 | Kritik9,1 | — | %0,9 | 11 Ağu 2021 |
36İzleyin | CVE-2024-30166İstismar yok | In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack trustedfirmware · mbed tls · CWE-121 | Kritik9,1 | — | %0,7 | 2 Nis 2024 |
36İzleyin | CVE-2026-34873İstismar yok | An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.trustedfirmware · mbed tls · CWE-287 | Kritik9,1 | — | %0,4 | 1 Nis 2026 |
35İzleyin | CVE-2022-46152Kavram kanıtı | OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functiontrustedfirmware · op-tee · CWE-129 | Yüksek8,8 | — | %0,5 | 29 Kas 2022 |
34İzleyin | CVE-2026-33317Kavram kanıtı | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosuretrustedfirmware · op-tee · CWE-125 | Yüksek8,7 | — | %0,2 | 23 Nis 2026 |
33İzleyin | CVE-2017-2784İstismar yok | An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2trustedfirmware · mbed tls · CWE-295 | Yüksek8,1 | — | %3,4 | 20 Nis 2017 |
32İzleyin | CVE-2017-14032İstismar yok | ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authenticaarm · mbed tls · CWE-287 | Yüksek8,1 | — | %1,5 | 30 Ağu 2017 |
32İzleyin | CVE-2017-7563İstismar yok | In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protecttrustedfirmware · trusted firmware-a · CWE-732 | Yüksek8,1 | — | %0,9 | 7 Haz 2017 |
- CVE-2021-2756253Planlayın
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure da
OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %3trustedfirmware · trusted firmware-m25 May 2021
- CVE-2019-101029840Planlayın
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.
KritikCVSS 9,8Kavram kanıtıEPSS %4trustedfirmware · op-tee15 Tem 2019
- CVE-2019-101029640Planlayın
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %3trustedfirmware · op-tee15 Tem 2019
- CVE-2019-101029740Planlayın
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %3trustedfirmware · op-tee15 Tem 2019
- CVE-2021-4473240Planlayın
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
KritikCVSS 9,8İstismar yokEPSS %3arm · mbed tls20 Ara 2021
- CVE-2019-101029539İzleyin
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.
KritikCVSS 9,8İstismar yokEPSS %2trustedfirmware · op-tee15 Tem 2019
- CVE-2019-101029339İzleyin
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing.
KritikCVSS 9,8İstismar yokEPSS %2trustedfirmware · op-tee15 Tem 2019
- CVE-2019-101029239İzleyin
Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks.
KritikCVSS 9,8İstismar yokEPSS %2trustedfirmware · op-tee16 Tem 2019
- CVE-2022-4639339İzleyin
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0.
KritikCVSS 9,8İstismar yokEPSS %1arm · mbed tls15 Ara 2022
- CVE-2023-4519939İzleyin
Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.
KritikCVSS 9,8İstismar yokEPSS %1trustedfirmware · mbed tls6 Eki 2023
- CVE-2024-4574639İzleyin
An issue was discovered in Trusted Firmware-M through 2.1.0.
KritikCVSS 9,8İstismar yokEPSS %19 Eki 2024
- CVE-2026-3487739İzleyin
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.
KritikCVSS 9,8İstismar yokEPSS %1arm · mbed tls2 Nis 2026
- CVE-2024-4515839İzleyin
An issue was discovered in Mbed TLS 3.6 before 3.6.1.
KritikCVSS 9,8İstismar yokEPSS %1trustedfirmware · mbed tls5 Eyl 2024
- CVE-2024-4919539İzleyin
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair
KritikCVSS 9,8İstismar yokEPSS %1trustedfirmware · mbed tls15 Eki 2024
- CVE-2026-3487539İzleyin
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.
KritikCVSS 9,8İstismar yokEPSS %1trustedfirmware · mbed tls1 Nis 2026
- CVE-2024-4515939İzleyin
An issue was discovered in Mbed TLS 3.x before 3.6.1.
KritikCVSS 9,8İstismar yokEPSS %0trustedfirmware · mbed tls5 Eyl 2024
- CVE-2022-3540937İzleyin
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.
KritikCVSS 9,1İstismar yokEPSS %2arm · mbed tls15 Tem 2022
- CVE-2019-2505236İzleyin
In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions dire
KritikCVSS 9,1İstismar yokEPSS %1trustedfirmware · op-tee11 Ağu 2021
- CVE-2024-3016636İzleyin
In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack
KritikCVSS 9,1İstismar yokEPSS %1trustedfirmware · mbed tls2 Nis 2024
- CVE-2026-3487336İzleyin
An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.
KritikCVSS 9,1İstismar yokEPSS %0trustedfirmware · mbed tls1 Nis 2026
- CVE-2022-4615235İzleyin
OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function
YüksekCVSS 8,8Kavram kanıtıEPSS %0trustedfirmware · op-tee29 Kas 2022
- CVE-2026-3331734İzleyin
OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure
YüksekCVSS 8,7Kavram kanıtıEPSS %0trustedfirmware · op-tee23 Nis 2026
- CVE-2017-278433İzleyin
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2
YüksekCVSS 8,1İstismar yokEPSS %3trustedfirmware · mbed tls20 Nis 2017
- CVE-2017-1403232İzleyin
ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentica
YüksekCVSS 8,1İstismar yokEPSS %2arm · mbed tls30 Ağu 2017
- CVE-2017-756332İzleyin
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protect
YüksekCVSS 8,1İstismar yokEPSS %1trustedfirmware · trusted firmware-a7 Haz 2017