Vulnerability in Arm C1-Premium
CVE-2025-0647
In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries which should have been invalidated by the TLBI.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.9 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.002 (5.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 6th percentile — 5.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Arm C1-Premium — versions 0
- Arm C1-Premium Firmware
- Arm C1-Ultra — versions 0
- Arm C1-Ultra Firmware
- Arm Cortex-A710 — versions 0
- Arm Cortex-A710 Firmware
- Arm Cortex-X2 — versions 0
- Arm Cortex-X2 Firmware
- Arm Cortex-X3 — versions 0
- Arm Cortex-X3 Firmware
Weakness classification (CWE)
References
- developer.arm.com/documentation/111546 (Vendor Advisory)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Third Party Advisory)
Frequently asked questions
- What is CVE-2025-0647?
- CVE-2025-0647 is a high-severity vulnerability in Arm C1-Premium, classified under Sensitive Information in Resource Not Removed Before Reuse. CVSS score: 7.9/10. Published 2026-01-14.
- How severe is CVE-2025-0647?
- High severity. CVSS v3 base score is 7.9 out of 10.