VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Apr 6, 2017· Updated May 13, 2026

CVE-2016-10319

CVE-2016-10319

Description

In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overflows. This affects certain cases involving execution of both AArch64 Generic Trusted Firmware (TF) BL1 code and other firmware update code.

Affected products

2
  • Arm Trusted Firmware Project/Arm Trusted Firmware2 versions
    cpe:2.3:o:arm_trusted_firmware_project:arm_trusted_firmware:1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arm_trusted_firmware_project:arm_trusted_firmware:1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:arm_trusted_firmware_project:arm_trusted_firmware:1.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

News mentions

0

No linked articles in our index yet.