Memory Access Vulnerability in Arm C1-Pro Firmware
CVE-2026-0995

3.6LOW

Key Information:

Vendor

Arm
Status
C1 Pro
Vendor
CVE Published:
2 March 2026

What is CVE-2026-0995?

An issue has been discovered in the Arm C1-Pro firmware prior to version r1p2-50eac0, where a specific sequence involving Translation Lookaside Buffer Invalidation (TLBI) followed by a Data Synchronization Barrier (DSB) may not guarantee the successful completion of memory access operations related to Scalable Matrix Extension (SME). This can potentially lead to unexpected behavior in memory transactions under certain conditions.

Affected Version(s)

C1 Pro 0

References

https://developer.arm.com/documentation/111823

CVSS V3.1

Score:
3.6
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.