When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Oct 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade llvm-helpUpgrade llvm-libs | May 7, 2025 | Oct 31, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade llvm-libsUpgrade llvmUpgrade llvm-help | Apr 1, 2025 | Oct 31, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub