Back to Database
Status published
Medium
CVE-2020-13844
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes...
Vulnerability Description
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13844
Credits & Attribution
No credits recorded in the NVD database.
References
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
- https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
- http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
More from arm
View All →CVE-2022-48251
The AES instructions on the ARMv8 platform do not have...
High
7.5
CVE-2022-46891
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel...
Unknown
0
CVE-2022-46396
An issue was discovered in the Arm Mali Kernel Driver....
Unknown
0
CVE-2022-46395
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
Affected Vendor
Affected Software
cortex-a32 firmware, cortex-a35 firmware, cortex-a53 firmware, cortex-a57 firmware, cortex-a72 firmware, cortex-a73 firmware, cortex-a34 firmware, leap
Vulnerable Versions:
15.1, 15.2
Timeline
Official Publish:
June 8th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.