VYPR
← All advisories
Low severity3.7NVD Advisory· Published Oct 31, 2024· Updated Jun 17, 2026

CVE-2024-7883

CVE-2024-7883

Description

When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

Affected products

11
  • Arm/Cortex-M Security Extensionsllm-create
  • Arm Ltd/Arm Compiler for Embeddedv5
    Range: 6.6
  • Arm Ltd/Arm Compiler for Embedded FuSa 6.16LTSv5
    Range: All versions
  • Arm Ltd/Arm Compiler for Embedded FuSa 6.21v5
    Range: All versions
  • Arm Ltd/Arm Compiler for Functional Safety 6.6v5
    Range: All versions
  • Arm Ltd/CLangv5
    Range: 13
  • Arm/Arm Compiler For Embedded
    cpe:2.3:a:arm:arm_compiler_for_embedded:*:*:*:*:*:*:*:*
    Range: >=6.6,<6.23
  • Arm/Arm Compiler For Embedded Fusa2 versions
    cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*+ 1 more
    • cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.16:*:*:*:lts:*:*:*
    • cpe:2.3:a:arm:arm_compiler_for_embedded_fusa:6.21:*:*:*:lts:*:*:*
  • Arm/Arm Compiler For Functional Safety
    cpe:2.3:a:arm:arm_compiler_for_functional_safety:6.6:*:*:*:*:*:*:*
  • Arm/Clang
    cpe:2.3:a:arm:clang:*:*:*:*:*:*:*:*
    Range: >=11.0.0,<20.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.