An information disclosure vulnerability exists on ARM... · CVE-2020-1459 · GitHub Advisory Database · GitHub

An information disclosure vulnerability exists on ARM...

Low severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 12, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation, aka 'Windows ARM Information Disclosure Vulnerability'.

References

Published by the National Vulnerability Database

Aug 17, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 12, 2024

Weaknesses

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Learn more on MITRE.

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. Learn more on MITRE.