CVE-2017-7563 | BDVDB-2026-86198 Detail

Description#

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-3

Exploit#

No public exploit known

History#

Version 12017-06-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.