CVE-2026-7328 in Core Runtime
Resumen
por MITRE • 2026-07-22
Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond availability is integration-specific.
This issue affects Core Runtime Firmware: 2.1.0.
If you want to get best quality of vulnerability data, you may have to visit VulDB.