CVE-2021-35465
First published: Mon Aug 23 2021(Updated: )
Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arm Cortex-m33 Firmware | >=r0p0<=r1p0 | |
| Arm Cortex-M33 | ||
| Arm Cortex-m35p Firmware | =r0 | |
| Arm Cortex-M35P | ||
| Arm Cortex-m55 Firmware | >=r0p0<=r1p0 | |
| Arm Cortex-M55 | ||
| Arm China Star-mc1 Firmware | ||
| Arm China STAR-MC1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-35465?
CVE-2021-35465 is a vulnerability that affects certain Arm products before 2021-08-23, which do not properly consider the effect of exceptions on a VLLDM instruction. As a result, a Non-secure handler may have read or write access to part of a Secure context.
Which Arm products are affected by CVE-2021-35465?
Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, and Arm Cortex-M55 r0p0 through r1p0 are affected by CVE-2021-35465.
What is the severity of CVE-2021-35465?
CVE-2021-35465 has a severity rating of low (3.4).
How does CVE-2021-35465 impact security?
CVE-2021-35465 can allow a Non-secure handler to have unauthorized read or write access to part of a Secure context.
Where can I find more information about CVE-2021-35465?
You can find more information about CVE-2021-35465 on the Arm Security Updates page: https://developer.arm.com/support/arm-security-updates
- collector/nvd-index
- agent/author
- agent/references
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/arm
- canonical/arm cortex-m33 firmware
- version/arm cortex-m33 firmware/r0p0
- version/arm cortex-m33 firmware/r1p0
- canonical/arm cortex-m33
- canonical/arm cortex-m35p firmware
- version/arm cortex-m35p firmware/r0
- canonical/arm cortex-m35p
- canonical/arm cortex-m55 firmware
- version/arm cortex-m55 firmware/r0p0
- version/arm cortex-m55 firmware/r1p0
- canonical/arm cortex-m55
- canonical/arm china star-mc1 firmware
- canonical/arm china star-mc1