CVE-2017-7564

HighCVSS 7.5

Published: 07/06/2017(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operation, potentially leading to serious availability issues in the secure world.

Recommendation

It is recommended to update ARM Trusted Firmware to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in ARM Trusted Firmware

CVE-2017-7563High
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs due to inconsistency in the number of execute-never bits (one bit versus two bits).

Original NVD description (English source)