The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Oct 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade llvm-libsUpgrade llvm-help | May 7, 2025 | Oct 31, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade llvmUpgrade llvm-helpUpgrade llvm-libs | Apr 1, 2025 | Oct 31, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 31, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub