Vulnerability in Arm Cortex-a57
CVE-2024-10929
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.
EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Arm Cortex-a57 — versions 0
- Arm Cortex-a57_firmware
- Arm Cortex-a72 — versions 0
- Arm Cortex-a72_firmware
- Arm Cortex-a73 — versions 0
- Arm Cortex-a73_firmware
- Arm Cortex-a75 — versions 0
- Arm Cortex-a75_firmware
Weakness classification (CWE)
References
- arm-security@arm.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-10929?
- CVE-2024-10929 is a medium-severity vulnerability in Arm Cortex-a57, classified under Observable Discrepancy. CVSS score: 5.1/10. Published 2025-01-22.
- How severe is CVE-2024-10929?
- Medium severity. CVSS v3 base score is 5.1 out of 10.