TF
Product
Trusted Firmware-M
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add Trusted Firmware-M to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43619 | 7.8 | Mar 1 | Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition Affected: 1.4.0; 1.4.1 |
| CVE-2023-40271 | 7.5 | Sep 8 | In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the… Affected: 1.6.0; 1.6.1; 1.7.0; 1.8.0 |
| CVE-2021-32032 | 7.5 | May 21 | In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the… Affected: through 1.3.0 |
| CVE-2026-54467 | 7.0 | Aug 26 | On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer Affected: before 00d1b3e716dc636f7ad4398980ae55427dc1731d |
Showing 4