What’s Vulnerable › Vulnerabilities

CVE-2024-7883: CMSE secure state may leak from stack to floating-point registers

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-10-31 · updated 2026-06-17
• Weakness: CWE-226

Description

When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

Affected products

• Arm Ltd Arm Compiler for Embedded: from 6.6 before 6.23 — fixed in 6.23
• Arm Compiler For Embedded Fusa: 6.16, 6.21
• Arm Compiler For Functional Safety: 6.6
• Arm Ltd CLang: from 11.0.0 before 20.1.0 — fixed in 20.1.0

How to fix

Upgrade to a fixed version: Arm Ltd Arm Compiler for Embedded 6.23; Arm Ltd CLang 20.1.0. Check the vendor advisory for mitigations.

References

• https://developer.arm.com/Arm%20Security%20Center/Cortex-M%20Security%20Extensions%20Vulnerability

Get alerted when CVE-2024-7883 or the next vulnerability affects your stack