Buffer Overflow Risk in Trusted Firmware for Arm CPUs
CVE-2025-53022
Currently unrated
What is CVE-2025-53022?
The Trusted Firmware-M for Arm CPUs has a critical vulnerability that arises during firmware upgrades. The Firmware Upgrade (FWU) module fails to properly validate the length of the Type-Length-Value (TLV) structure for dependent components. An attacker can exploit this by manipulating the length field in a crafted TLV entry, allowing for possible buffer overflow and stack memory corruption during the upgrade process. This flaw poses a serious risk as it can lead to unauthorized code execution and compromise the integrity of the system.