Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-48251

No fix known EPSS <1%

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."

Published 2023-01-10 · CVE record · OSV

Products: arm cortex-a53_firmware, arm cortex-a55_firmware, arm cortex-a57_firmware, arm cortex-a72_firmware, arm cortex-a73_firmware, arm cortex-a75_firmware, arm cortex-a76_firmware, arm cortex-a76ae_firmware, arm cortex-a77_firmware, arm cortex-a78_firmware