2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"C1 Pro","vendor":"Arm","versions":[{"lessThan":"r1p2-50eac0","status":"affected","version":"0","versionType":"custom"}]}],"source":"arm-security@arm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arm:c1-pro_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B1A1B9E3-D64D-412C-A04C-E17AF995CD87","versionEndExcluding":"r1p2-50eac0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arm:c1-pro:-:*:*:*:*:*:*:*","matchCriteriaId":"B682BB76-044E-416E-930E-19DDBB6DB940","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME."},{"lang":"es","value":"Se ha identificado un problema en Arm C1-Pro anterior a r1p2-50eac0, donde, bajo ciertas condiciones, un TLBI+DSB podría fallar en garantizar la finalización de los accesos a memoria relacionados con SME."}],"id":"CVE-2026-0995","lastModified":"2026-06-17T10:11:44.463","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.6,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.0,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0995","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-02T16:14:24.107940Z","version":"2.0.3"}}]},"published":"2026-03-02T15:16:31.910","references":[{"source":"arm-security@arm.com","tags":["Vendor Advisory"],"url":"https://developer.arm.com/documentation/111823"}],"sourceIdentifier":"arm-security@arm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"arm-security@arm.com","type":"Secondary"}]}
|