[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqbCTKdSInC1oK7B0zgfUFlDhYoLeEuCAnln325MN9rQ":3,"g5a-family:arm\u002Ftrusted_firmware-m":118,"g5a-ex:arm\u002Ftrusted_firmware-m@*":119},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":90,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"arm","trusted_firmware-m",15,4,1,"2024-09-05",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},"1.4.0",{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},"1.4.1",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.0",{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},"1.6.0",{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},"1.6.1",{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},"1.7.0",{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},"1.8.0",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.1",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.0",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1","Trusted Firmware-m by Arm is a technology product with 15 tracked versions and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59,60,61,62],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},[64,72,79,85],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":4,"epssScore":71},"CVE-2021-27562","In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.","2021-05-25",5.5,"v3.1","Medium",0.03093,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":69,"severity":77,"isKev":17,"epssScore":78},"CVE-2021-43619","Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.","2022-03-01",7.8,"High",0.0042,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":69,"severity":77,"isKev":17,"epssScore":84},"CVE-2023-40271","In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8.","2023-09-08",7.5,0.00386,{"cveId":86,"description":87,"publishedDate":12,"cvssScore":88,"cvssVersion":69,"severity":70,"isKev":17,"epssScore":89},"CVE-2023-51712","An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.",4.7,0.00295,[91],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"severity":70,"isKev":4,"epssScore":71,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","2021-11-03","Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.","Apply updates per vendor instructions.",{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Trusted Firmware-m by Arm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Trusted Firmware-m by Arm covering 15 versions with 4 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Trusted Firmware-m vulnerabilities, Trusted Firmware-m security, Trusted Firmware-m CVE, Arm Trusted Firmware-m, Trusted Firmware-m threat intelligence, Arm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Trusted Firmware-m KEV, Trusted Firmware-m exploited vulnerabilities",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Trusted Firmware-m","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Farm\u002Ftrusted_firmware-m",{"@type":106,"name":107,"url":108},"Organization","Arm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Farm","Security Software","15 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Trusted Firmware-m Security Vulnerabilities","Security vulnerabilities affecting Trusted Firmware-m by Arm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-17T20:28:30.819Z","3.0",[],{"rows":120,"total":11,"capped":17,"failed":16},[121],{"cveId":65,"name":92,"severity":70,"cvss":68,"added":93,"epss":71,"published":122,"ranges":123,"checked":4,"hits":125,"covers":17},"2021-05-25T19:15:07.737",[124],"up to 1.2.0",[]]