CVE-2024-5660
high-risk
Published 2024-12-10
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.
Do I need to act?
-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (16)
Cortex-A710 Firmware
Cortex-A77 Firmware
Cortex-A78 Firmware
Cortex-A78Ae Firmware
Cortex-A78C Firmware
Cortex-X1 Firmware
Cortex-X1C Firmware
Cortex-X2 Firmware
Cortex-X3 Firmware
Cortex-X4 Firmware
Cortex-X925 Firmware
Neoverse N2 Firmware
Neoverse-V1 Firmware
Neoverse-V2 Firmware
Neoverse-V3 Firmware
Neoverse-V3Ae Firmware
Affected Vendors
References (1)
50
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
0/34 · Minimal
Exposure
18/34 · Moderate