CVE-2021-35465

Description

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration).

3.4

CVSS

Severity: Low

CVSS 3.1 •

CVSS 2.0 •

EPSS 0.07%

Vendor Advisory arm.com Vendor Advisory arm.com

Affected: n/a n/a

References

Link	Tags
https://developer.arm.com/support/arm-security-updates	vendor advisory
https://developer.arm.com/support/arm-security-updates/vlldm-instruction-security-vulnerability	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2021-35465?: CVE-2021-35465 has been scored as a low severity vulnerability.
How to fix CVE-2021-35465?: To fix CVE-2021-35465, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-35465 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-35465 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.