CVE-2021-43619

HIGH · CVSS 7.8 EPSS 0.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-43619

Severity

HIGH

CVSS

7.8

EPSS

0.42%

Original NVD Description

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.