Back to Database
Status published
High
CVE-2022-48251
The AES instructions on the ARMv8 platform do not have...
Vulnerability Description
The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-48251
Credits & Attribution
No credits recorded in the NVD database.
More from arm
View All →CVE-2022-46891
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel...
Unknown
0
CVE-2022-46396
An issue was discovered in the Arm Mali Kernel Driver....
Unknown
0
CVE-2022-46395
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
CVE-2022-46394
An issue was discovered in the Arm Mali GPU Kernel...
Unknown
0
Affected Vendor
Affected Software
cortex-a53 firmware, cortex-a55 firmware, cortex-a57 firmware, cortex-a72 firmware, cortex-a73 firmware, cortex-a75 firmware, cortex-a76 firmware, cortex-a76ae firmware, cortex-a77 firmware, cortex-a78 firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
January 10th, 2023
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.