PT-2020-14861 · Arm · Armv8-M
Published
2020-11-12
·
Updated
2020-12-01
·
CVE-2020-16273
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Armv8-M processors (all versions)
Description
The stack selection mechanism in Arm software implementing the Armv8-M processors can be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the stack is not initialized. This issue affects only the software based on Armv8-M processors with the Security Extension.
Recommendations
For Armv8-M processors (all versions), ensure proper initialization of the stack to prevent potential exploitation. As a temporary workaround, consider implementing additional checks to prevent stack-underflow attacks until a more comprehensive solution is available.
Fix
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Armv8-M