CVE-2017-9607 - CVE House
Back to Database
Status published High CVE-2017-9607

The BL1 FWU SMC handling code in ARM Trusted Firmware...

Vulnerability Description

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check protection mechanism, cause a denial of service, or possibly have unspecified other impact via a crafted AArch32 image, which triggers an integer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9607

Credits & Attribution

No credits recorded in the NVD database.

References

More from trustedfirmware

View All →
CVE-2022-47630
Trusted Firmware-A through 2.8 has an out-of-bounds read in the...
Unknown 0
CVE-2022-47549
An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable...
Unknown 0
CVE-2021-45450
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv...
High 7.5
CVE-2021-44149
An issue was discovered in Trusted Firmware OP-TEE Trusted OS...
High 7.8
CVE-2021-43619
Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow...
High 7.8

Affected Vendor

trustedfirmware

View all reports →

Affected Software

trusted firmware-a
Vulnerable Versions:
0

Timeline

Official Publish: September 20th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.