Exposure of resource to wrong sphere in Arm Cortex-A77
Priority MEDIUM 50CWE-668Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00551 46th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Arm | Cortex-A77 | all versions | — | No fix listed | CNA |
| Arm | Neoverse V1 | all versions | — | No fix listed | CNA |
| Arm | Cortex-A78AE | all versions | — | No fix listed | CNA |
| Arm | Cortex-78C | all versions | — | No fix listed | CNA |
| Arm | Cortex-X1C | all versions | — | No fix listed | CNA |
| Arm | Cortex-A78 | all versions | — | No fix listed | CNA |
| Arm | Cortex-X1 | all versions | — | No fix listed | CNA |
| Arm | Neoverse N2 | all versions | — | No fix listed | CNA |
| Arm | Cortex-A710 | all versions | — | No fix listed | CNA |
| Arm | Cortex-X2 | all versions | — | No fix listed | CNA |
| Arm | Neoverse V2 | all versions | — | No fix listed | CNA |
| Arm | Cortex-X3 | all versions | — | No fix listed | CNA |
| Arm | Neoverse V3AE | all versions | — | No fix listed | CNA |
| Arm | Neoverse V3 | all versions | — | No fix listed | CNA |
| Arm | Cortex-X4 | all versions | — | No fix listed | CNA |
| Arm | Cortex-X925 | all versions | — | No fix listed | CNA |
- Cortex-A77 VendorArm Affected all versions Fixed in — No fix listed CNA
- Neoverse V1 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-A78AE VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-78C VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X1C VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-A78 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X1 VendorArm Affected all versions Fixed in — No fix listed CNA
- Neoverse N2 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-A710 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X2 VendorArm Affected all versions Fixed in — No fix listed CNA
- Neoverse V2 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X3 VendorArm Affected all versions Fixed in — No fix listed CNA
- Neoverse V3AE VendorArm Affected all versions Fixed in — No fix listed CNA
- Neoverse V3 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X4 VendorArm Affected all versions Fixed in — No fix listed CNA
- Cortex-X925 VendorArm Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:arm:cortex-a710_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-a710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-a77_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-a77:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-a78_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-a78:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-a78ae_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-a78ae:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-a78c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-a78c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
- cpe:2.3:o:arm:cortex-a710_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-a710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-a77_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-a77:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-a78_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-a78:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-a78ae_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-a78ae:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-a78c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-a78c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:arm:cortex-x1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-x1c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x1c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-x2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-x3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-x4_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:cortex-x925_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:cortex-x925:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:neoverse_n2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:neoverse_n2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:neoverse-v1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:neoverse-v1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:neoverse-v2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:neoverse-v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:neoverse-v3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:neoverse-v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
| cpe:2.3:o:arm:neoverse-v3ae_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arm |
| cpe:2.3:h:arm:neoverse-v3ae:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Arm |
- cpe:2.3:o:arm:cortex-x1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-x1c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x1c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-x2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-x3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-x4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:cortex-x925_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:cortex-x925:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:neoverse_n2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:neoverse_n2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:neoverse-v1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:neoverse-v1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:neoverse-v2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:neoverse-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:neoverse-v3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:neoverse-v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
- cpe:2.3:o:arm:neoverse-v3ae_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arm
- cpe:2.3:h:arm:neoverse-v3ae:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arm
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-5660
- 2026-10-03 Alias added: GHSA-h32q-4pph-8pgm
References
More Arm Cortex-a710 Firmware vulnerabilities
- TI-2025-00544 In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may… CVSS 3.1HIGH 7.9
- TI-2022-07932 Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict… CVSS 3.1MEDIUM 5.6
- TI-2022-09053 Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch… CVSS 3.1MEDIUM 4.7
Sources
- CVE-2024-5660 · CVE Program
- CVE-2024-5660 · NVD
- FIRST EPSS
- GHSA-h32q-4pph-8pgm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences