CVE-2016-10319

—

CVSS 3.0

5.9 medium

EPSS

2%p74

Published

Apr 6, 2017 (Apr 6, 2017)

Modified

Jun 17, 2026

Description

In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overflows. This affects certain cases involving execution of both AArch64 Generic Trusted Firmware (TF) BL1 code and other firmware update code.

Vendors: arm trusted firmware project
Products: arm trusted firmware
Weakness: CWE-190
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.