Vulnerability · Published Mar 1, 2022 · Assigned by mitre
CVE-2021-43619
High 7.8
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 63.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.
Affected products (as reported)
References
- https://developer.arm.com/support/arm-security-updates x_refsource_MISC
- https://www.trustedfirmware.org x_refsource_MISC
- https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/ x_refsource_MISC
- https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/fwu_write_vulnerability.html x_refsource_CONFIRM