Known vulnerabilities in TF-PSA-Crypto

Vendor: ARM
Software: TF-PSA-Crypto
Software CPE: cpe:2.3:a:arm:tf-psa-crypto:*:*:*:*:*:*:*:*
Website: https://www.arm.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TF-PSA-Crypto TF-PSA-Crypto is affected by 8 known vulnerabilities: 1 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137396 - Improper input validation
CVE-2026-54434		 CWE-20 Medium
No
No
 1.1.1 13.07.2026 SB2026071347
#VU137395 - Information Exposure Through Timing Discrepancy
CVE-2026-54435		 CWE-208 Low
No
No
 1.1.1, 1.2.0 13.07.2026 SB2026071347
#VU137394 - Memory corruption
CVE-2026-50584		 CWE-119 Medium
No
No
 1.1.1, 1.2.0 13.07.2026 SB2026071347
#VU124854 - Information Exposure Through Timing Discrepancy
CVE-2025-66442		 CWE-208 Low
No
No
 - 02.04.2026 SB2026040274
SB20260427166
SB20260427167
and 1 more
#VU124808 - Use of Insufficiently Random Values
CVE-2026-25835		 CWE-330 Low
No
No
 1.1.0 02.04.2026 SB2026040204
SB2026040205
SB2026040277
and 7 more
#VU124805 - Improper input validation
CVE-2026-34872		 CWE-20 Medium
No
No
 1.1.0 02.04.2026 SB2026040204
SB2026040205
SB20260427166
and 2 more
#VU124804 - Buffer overflow
CVE-2026-34875		 CWE-120 High
No
No
 1.1.0 02.04.2026 SB2026040204
SB2026040205
SB20260427166
and 2 more
#VU124803 - Use of Insufficiently Random Values
CVE-2026-34871		 CWE-330 Low
No
No
 1.1.0 02.04.2026 SB2026040204
SB2026040205
SB2026040277
and 6 more