When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | no-fix-debian-deb-package | May 15, 2025 | Oct 31, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-llvm-helphuawei-euleros-2_0_sp12-upgrade-llvm-libs | May 7, 2025 | Oct 31, 2024 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-llvmhuawei-euleros-2_0_sp13-upgrade-llvm-helphuawei-euleros-2_0_sp13-upgrade-llvm-libs | Apr 1, 2025 | Oct 31, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub