high7.5
CVE-2022-48251
The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks.
Impact
The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arm | Cortex-A53 Firmware | All versions |
| Arm | Cortex-A55 Firmware | All versions |
| Arm | Cortex-A57 Firmware | All versions |
| Arm | Cortex-A72 Firmware | All versions |
| Arm | Cortex-A73 Firmware | All versions |
| Arm | Cortex-A75 Firmware | All versions |
| Arm | Cortex-A76 Firmware | All versions |
| Arm | Cortex-A76ae Firmware | All versions |
| Arm | Cortex-A77 Firmware | All versions |
| Arm | Cortex-A78 Firmware | All versions |