CVE-2021-32032

HighCVSS 7.5

Published: 21/05/2021(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

In Trusted Firmware-M up to version 1.3.0, improper memory management during cryptographic operations can lead to a memory leak in case of operation failure.

Risk Assessment

Memory leaks can lead to increased resource consumption, potentially affecting the stability and performance of the system over time.

Recommendation

It is recommended to update to the latest version of Trusted Firmware-M and monitor memory usage in applications utilizing this library.

Other vulnerabilities in Trusted Firmware-M

CVE-2026-54467High
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

Original NVD description (English source)

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.