VYPR
← All advisories
High severity7.0NVD Advisory· Published Sep 20, 2017· Updated Jun 17, 2026

CVE-2017-9607

CVE-2017-9607

Description

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an integer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Arm/Arm Trusted Firmware2 versions
    cpe:2.3:o:trustedfirmware:trusted_firmware-a:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:trustedfirmware:trusted_firmware-a:*:*:*:*:*:*:*:*range: <=1.3
    • (no CPE)range: <1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.