CVE-2024-10929 - Vulnerability Details - OpenCVE

In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Arm	Cortex-a72 Cortex-a73 Cortex-a75

No data.

No data.

References

Link	Providers
https://developer.arm.com/Arm%20Security%20Center/Spectre-BSE

History

Tue, 22 Jul 2025 11:00:00 +0000

Type	Values Removed	Values Added
Description	In certain circumstances, an issue in Arm Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.	In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.

Mon, 03 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 22 Jan 2025 16:15:00 +0000

Type	Values Removed	Values Added
Description		In certain circumstances, an issue in Arm Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.
Title		Spectre-BSE
Weaknesses		CWE-1423
References		https://developer.arm.com/Arm%20Security%20Center/Spectre-BSE

MITRE

Status: PUBLISHED

Assigner: Arm

Published: 2025-01-22T16:05:35.528Z

Updated: 2025-07-22T10:52:46.725Z

Reserved: 2024-11-06T16:41:11.814Z

Link: CVE-2024-10929

Vulnrichment

Updated: 2025-01-22T17:39:55.122Z

NVD

Status : Awaiting Analysis

Published: 2025-01-22T16:15:28.790

Modified: 2025-07-22T11:15:23.403

Link: CVE-2024-10929

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-10929", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "state": "PUBLISHED", "assignerShortName": "Arm", "dateReserved": "2024-11-06T16:41:11.814Z", "datePublished": "2025-01-22T16:05:35.528Z", "dateUpdated": "2025-07-22T10:52:46.725Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Cortex-A72", "vendor": "Arm", "versions": [{"lessThan": "r1p0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Cortex-A73", "vendor": "Arm", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Cortex-A75", "vendor": "Arm", "versions": [{"status": "affected", "version": "0"}]}, {"defaultStatus": "unaffected", "product": "Cortex-A57", "vendor": "Arm", "versions": [{"status": "affected", "version": "0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.</span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>"}], "value": "In certain circumstances, an issue in Arm Cortex-A57,\u00a0Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1423", "description": "CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2025-07-22T10:52:46.725Z"}, "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Spectre-BSE"}], "source": {"discovery": "UNKNOWN"}, "title": "Spectre-BSE", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-01-22T17:40:01.738399Z", "id": "CVE-2024-10929", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-03T14:17:35.216Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-10929", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-22T17:40:01.738399Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-22T17:39:55.122Z"}}], "cna": {"title": "Spectre-BSE", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Arm", "product": "Cortex-A72", "versions": [{"status": "affected", "version": "0", "lessThan": "r1p0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Arm", "product": "Cortex-A73", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Arm", "product": "Cortex-A75", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "unknown"}, {"vendor": "Arm", "product": "Cortex-A57", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://developer.arm.com/Arm%20Security%20Center/Spectre-BSE"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "In certain circumstances, an issue in Arm Cortex-A57,\u00a0Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history.</span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1423", "description": "CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"}]}], "providerMetadata": {"orgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "shortName": "Arm", "dateUpdated": "2025-07-22T10:52:46.725Z"}}}, "cveMetadata": {"cveId": "CVE-2024-10929", "state": "PUBLISHED", "dateUpdated": "2025-07-22T10:52:46.725Z", "dateReserved": "2024-11-06T16:41:11.814Z", "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846", "datePublished": "2025-01-22T16:05:35.528Z", "assignerShortName": "Arm"}, "dataVersion": "5.1"}