Arm Compiler for Embedded Function Call sensitive information in resource not removed before reuse

Summaryinfo

A vulnerability classified as problematic has been found in Arm Compiler for Embedded, Compiler for Embedded FuSa, Compiler for Functional Safety and CLang. This vulnerability affects unknown code of the component Function Call Handler. The manipulation leads to sensitive information in resource not removed before reuse. This vulnerability is traded as CVE-2024-7883. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in Arm Compiler for Embedded, Compiler for Embedded FuSa, Compiler for Functional Safety and CLang (version now known) and classified as problematic. This issue affects some unknown processing of the component Function Call Handler. The manipulation with an unknown input leads to a sensitive information in resource not removed before reuse vulnerability. Using CWE to declare the problem leads to CWE-226. The product releases a resource such as memory or a file so that it can be made available for reuse, but it does not clear or "zeroize" the information contained in the resource before the product performs a critical state transition or makes the resource available for reuse by other entities. Impacted is confidentiality. The summary by CVE is:

When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

It is possible to read the advisory at developer.arm.com. The identification of this vulnerability is CVE-2024-7883 since 08/16/2024. The exploitation is known to be difficult. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 233625 (EulerOS 2.0 SP13 : llvm (EulerOS-SA-2025-1319)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (233625). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Arm

Name

• CLang
• Compiler for Embedded
• Compiler for Embedded FuSa
• Compiler for Functional Safety

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion