Latest vulnerabilities for vendor "arm"

Where

Sort:

Software

arm ltd valhall gpu kernel driver

arm bifrost gpu kernel driver

arm mbed tls

arm ltd arm 5th gen gpu architecture kernel driver

arm valhall gpu kernel driver

arm midgard gpu kernel driver

arm 5th gen gpu architecture kernel driver

arm midgard

arm mbed os

arm cortex-a72

arm mali graphics processing unit (gpu)

arm mbed

arm avalon gpu kernel driver

arm cortex-a

arm cortex-a57

arm cortex-a57 firmware

arm cortex-a72 firmware

arm cortex-a73

arm cortex-a73 firmware

arm bifrost android gralloc module

arm cortex-a75

arm cortex-a75 firmware

arm cortex-a77

arm cortex-a77 firmware

arm cortex-a78

arm cortex-a78 firmware

arm tf-psa-crypto

arm

arm cortex-a710

arm cortex-a710 firmware

arm cortex-a76

arm cortex-a76 firmware

arm cortex-a78ae

arm cortex-a78ae firmware

arm cortex-x1

arm cortex-x1 firmware

arm cortex-x2

arm cortex-x2 firmware

arm development studio

arm mali gpu kernel driver

arm midguard gpu kernel driver

arm neoverse n2

arm neoverse n2 firmware

arm 5th gen gpu architecture userspace driver

arm bifrost gpu userspace driver

arm cmsis-rtos2

arm cortex-a76ae

arm cortex-a76ae firmware

arm cortex-x3

arm cortex-x3 firmware

Arm ArmNNInteger Overflow

Risk 52

First published (updated )

CVE-2026-42627

Arm mbed TLSAn issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls…

Risk 43

Severity

7.5

First published (updated )

CVE-2026-34876

Arm mbed TLSAn issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient p…

Risk 86

Severity

9.8

First published (updated )

CVE-2026-34877

Arm mbed TLSMbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.

Risk 40

Severity

6.5

First published (updated )

CVE-2026-25834

Arm mbed TLSMbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generato…

Risk 56

Severity

7.7

First published (updated )

CVE-2026-25835

Arm mbed TLSBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2026-25833

Arm mbed TLSBuffer Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2026-34875

Arm mbed TLSNull Pointer Dereference

Risk 43

Severity

7.5

First published (updated )

CVE-2026-34874

Arm mbed TLSWeak RNG

Risk 50

Severity

6.7

First published (updated )

CVE-2026-34871

Arm mbed TLSInput Validation

Risk 66

Severity

9.1

First published (updated )

CVE-2026-34872

Arm mbed TLSIn Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decry…

Risk 30

Severity

5.1

First published (updated )

CVE-2025-66442

Arm mbed TLSAn issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resumi…

Risk 66

Severity

9.1

First published (updated )

CVE-2026-34873

Arm C1-proRace Condition

Risk 25

Severity

3.6

First published (updated )

CVE-2026-0995

Arm C1-ultra FirmwareIn certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB …

Risk 52

Severity

7.9

First published (updated )

CVE-2025-0647

Arm 5th Gen GPU Architecture Kernel DriverMali GPU Kernel Driver allows improper GPU processing operations

Risk 32

Severity

5.1

First published (updated )

CVE-2025-2879

Arm Ltd Valhall GPU Kernel DriverMali GPU Kernel Driver allows improper GPU memory processing operations

Risk 32

Severity

5.1

First published (updated )

CVE-2025-6349

Arm Ltd Valhall GPU Kernel DriverMali GPU Kernel Driver allows improper GPU processing operations

Risk 21

Severity

First published (updated )

CVE-2025-8045

Mbed TLS Mbed TLSMbed TLS through 3.6.4 has an Observable Timing Discrepancy.

Risk 27

Severity

5.3

First published (updated )

CVE-2025-59438

Arm mbed TLSMbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls …

Risk 36

Severity

6.2

First published (updated )

CVE-2025-54764

Linux Linux kernelARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy

Risk 32

Severity

5.5

First published (updated )

CVE-2023-53542

Arm 5th Gen GPU Architecture Kernel DriverMali GPU Kernel Driver allows access to already freed memory

Risk 27

Severity

5.3

First published (updated )

CVE-2025-3212

Arm 5th Gen GPU Architecture Userspace DriverFixes potential UAF in the ARM shader compiler reachable through WebGPU

Risk 22

Severity

4.3

First published (updated )

CVE-2025-0932

Arm Development StudioUncontrolled Search Path Element in Arm Development Studio before 2025

Risk 31

Severity

5.9

EPSS

0.02%

First published (updated )

CVE-2025-7427

Mbed TLS Mbed TLSNull Pointer Dereference

Risk 43

Severity

7.5

First published (updated )

CVE-2025-48965

Mbed TLS Mbed TLSIn Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal a…

Risk 22

Severity

First published (updated )

CVE-2025-49087

Arm mbed TLSUse After Free

Risk 99

Severity

9.8

Exploited

First published (updated )

CVE-2025-47917

Arm mbed TLSRace Condition

Risk 56

Severity

7.8

First published (updated )

CVE-2025-52496

Arm mbed TLSMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_bu…

Risk 32

Severity

4.8

First published (updated )

CVE-2025-52497

Arm MbedTLSIn MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation …

Risk 28

Severity

4.9

First published (updated )

CVE-2025-49600

MbedTLS MbedTLSIn MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is…

Risk 40

Severity

6.5

First published (updated )

CVE-2025-49601

Trending

Vendor Risk Score

Software

Arm ArmNNInteger Overflow

Arm mbed TLSAn issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls…

Arm mbed TLSAn issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient p…

Arm mbed TLSMbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.

Arm mbed TLSMbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generato…

Don't miss critical vulnerabilities

Arm mbed TLSBuffer Overflow

Arm mbed TLSBuffer Overflow

Arm mbed TLSNull Pointer Dereference

Arm mbed TLSWeak RNG

Arm mbed TLSInput Validation

Don't miss critical vulnerabilities

Arm mbed TLSIn Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decry…

Arm mbed TLSAn issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resumi…

Arm C1-proRace Condition

Arm C1-ultra FirmwareIn certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB …

Arm 5th Gen GPU Architecture Kernel DriverMali GPU Kernel Driver allows improper GPU processing operations

Don't miss critical vulnerabilities

Arm Ltd Valhall GPU Kernel DriverMali GPU Kernel Driver allows improper GPU memory processing operations

Arm Ltd Valhall GPU Kernel DriverMali GPU Kernel Driver allows improper GPU processing operations

Mbed TLS Mbed TLSMbed TLS through 3.6.4 has an Observable Timing Discrepancy.

Arm mbed TLSMbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls …

Linux Linux kernelARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy

Don't miss critical vulnerabilities

Arm 5th Gen GPU Architecture Kernel DriverMali GPU Kernel Driver allows access to already freed memory

Arm 5th Gen GPU Architecture Userspace DriverFixes potential UAF in the ARM shader compiler reachable through WebGPU

Arm Development StudioUncontrolled Search Path Element in Arm Development Studio before 2025

Mbed TLS Mbed TLSNull Pointer Dereference

Mbed TLS Mbed TLSIn Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal a…

Don't miss critical vulnerabilities

Arm mbed TLSUse After Free

Arm mbed TLSRace Condition

Arm mbed TLSMbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_bu…

Arm MbedTLSIn MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation …

MbedTLS MbedTLSIn MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is…

Don't miss critical vulnerabilities

Company

Resources

Contact