CVE-2022-48251

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-01-10

Last modified

2024-08-03

Weaknesses

CWE-203

Affected products

• Cortex-a53 Firmware (Arm)
• Cortex-a55 Firmware (Arm)
• Cortex-a57 Firmware (Arm)
• Cortex-a72 Firmware (Arm)
• Cortex-a73 Firmware (Arm)
• Cortex-a75 Firmware (Arm)
• Cortex-a76 Firmware (Arm)
• Cortex-a76ae Firmware (Arm)
• Cortex-a77 Firmware (Arm)
• Cortex-a78 Firmware (Arm)

References

• https://eprint.iacr.org/2022/230
• https://eshard.com/posts/sca-attacks-on-armv8