Description
Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.
NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.
Scoring
- CVSS: Not yet available
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2021-11-03
- Remediation due date: 2021-11-17
- Known ransomware campaign use: Unknown
More from Arm
- CVE-2024-4610 — Mali GPU Kernel Driver
- CVE-2023-4211 — Mali GPU Kernel Driver
- CVE-2021-29256 — Mali Graphics Processing Unit (GPU)
- CVE-2023-26083 — Mali Graphics Processing Unit (GPU)
- CVE-2022-38181 — Mali Graphics Processing Unit (GPU)