High severity7.5NVD Advisory· Published May 21, 2021· Updated Jun 17, 2026

CVE-2021-32032

Description

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Trusted Firmware M
cpe:2.3:o:trustedfirmware:trusted_firmware-m:*:*:*:*:*:*:*:*
Range: <=1.3.0
Trusted Firmware-M/Trusted Firmware-Mdescription
Trustedfirmware M/Trusted Firmware Mllm-fuzzy
Range: <=1.3.0

Patches

Vulnerability mechanics

References

git.trustedfirmware.org/TF-M/trusted-firmware-m.git/commit/nvdMailing ListPatchThird Party Advisory
git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/crypto_multi_part_ops_abort_fail.rstnvdExploitThird Party Advisory
www.trustedfirmware.orgnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000