CVE-2024-7883
CMSE secure state may leak from stack to floating-point registers
CVE-2024-7883 is a low vulnerability (CVSS 3.7) in Arm Compiler For Embedded, published October 31, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in clang 18.1.2-4.
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
CMSE secure state may leak from stack to floating-point registers
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-226
- Updated
- 2026-11-02
EUVDEUVD-2024-48728
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
EUVD-2024-48728- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwj9-2733-p4wv
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non...
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
GHSA-vwj9-2733-p4wv- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-226
- Updated
- 2026-11-02
NVD
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-226
- Updated
- 2026-11-02
OSVBELL-CVE-2024-7883
- Record
BELL-CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSV
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2024-7883
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
DEBIAN-CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-1968
llvm security update
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages.
Security Fix(es):
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)
- Record
OESA-2026-1968- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-2072
llvm security update
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages.
Security Fix(es):
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)
- Record
OESA-2026-2072- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-2073
llvm security update
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages.
Security Fix(es):
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)
- Record
OESA-2026-2073- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-2074
llvm security update
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages.
Security Fix(es):
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)
- Record
OESA-2026-2074- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-7883
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
UBUNTU-CVE-2024-7883- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVAZL-53888 No score
CVE-2024-7883 affecting package clang for versions less than 18.1.2-4
When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.
- Record
AZL-53888- Updated
- 2026-11-02
OSVCLSA-2026-1791537402 No score
llvm: Fix of CVE-2024-7883
- CVE-2024-7883: emit a vmov before the VLSTM in CMSE secure-to-non-secure calls that return a floating-point value, so CONTROL_S.SFPA is set for both the VLSTM and the VLLDM and the lazy save area cannot be left uninitialised
- Record
CLSA-2026-1791537402- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clangAzure Linux:3 |
before 18.1.2-4 | 18.1.2-4 |
clang15Alpaquita:23 |
15.0.5-r2 and later | None known |
llvm15Alpaquita:23 |
15.0.5-r1 and later | None known |
clang16Alpaquita:stream |
16.0.0-r13 and later | None known |
clang17Alpaquita:stream |
17.0.4-r1 and later | None known |
clang18Alpaquita:stream |
18.1.6-r0 and later | None known |
clang19Alpaquita:stream |
19.1.1-r1 and later | None known |
llvm16Alpaquita:stream |
16.0.0-r6 and later | None known |
llvm17Alpaquita:stream |
17.0.4-r2 and later | None known |
llvm18Alpaquita:stream |
18.1.6-r1 and later | None known |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
llvm19Alpaquita:stream |
19.1.1-r1 and later | None known |
clangTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-analyzerTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-libsTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-resource-filesystemTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-tools-extraTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
clang-tools-extra-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
compiler-rtTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
git-clang-formatTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
libompTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
libomp-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
lldTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
lld-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
lld-libsTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
lldbTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
lldb-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvmTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-cmake-utilsTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-develTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-docTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-googletestTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-libsTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-staticTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-testTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-toolsetTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
python3-clangTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
python3-litTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
python3-lldbTuxCare:AlmaLinux:9.6 |
before 19.1.7-2.el9_6.tuxcare.els1 | 19.1.7-2.el9_6.tuxcare.els1 |
llvm-toolchain-14Debian:12 |
All versions, plus listed versions 1:14.0.6-121:14.0.6-12+powerpc1:14.0.6-131:14.0.6-141:14.0.6-16 Show 6 moreShow less1:14.0.6-16.11:14.0.6-16.1~exp11:14.0.6-171:14.0.6-181:14.0.6-191:14.0.6-20 |
None known |
llvm-toolchain-15Debian:12 |
All versions, plus listed versions 1:15.0.6-41:15.0.6-5~exp11:15.0.6-5~exp21:15.0.6-5~exp31:15.0.7-1 Show 19 moreShow less1:15.0.7-1+hurd.11:15.0.7-101:15.0.7-10.1~exp11:15.0.7-111:15.0.7-11.11:15.0.7-121:15.0.7-131:15.0.7-141:15.0.7-151:15.0.7-15+hurd.11:15.0.7-21:15.0.7-31:15.0.7-41:15.0.7-51:15.0.7-5~exp11:15.0.7-61:15.0.7-71:15.0.7-81:15.0.7-9 |
None known |
llvm-toolchain-16Debian:12 |
All versions, plus listed versions 1:16.0.0-1~exp11:16.0.0-1~exp21:16.0.0-1~exp31:16.0.0-1~exp41:16.0.0-1~exp5 Show 45 moreShow less1:16.0.0~+rc1-1~exp11:16.0.0~+rc2-1~exp11:16.0.0~+rc3-1~exp11:16.0.0~+rc4-1~exp11:16.0.1-1~exp11:16.0.1-1~exp21:16.0.2-1~exp11:16.0.3-1~exp11:16.0.4-1~exp11:16.0.5-11:16.0.5-1~exp11:16.0.6-11:16.0.6-101:16.0.6-111:16.0.6-121:16.0.6-131:16.0.6-141:16.0.6-151:16.0.6-15+x321:16.0.6-15exp11:16.0.6-15~deb11u11:16.0.6-15~deb11u21:16.0.6-15~deb12u11:16.0.6-161:16.0.6-171:16.0.6-17exp11:16.0.6-181:16.0.6-191:16.0.6-19.1~exp11:16.0.6-21:16.0.6-201:16.0.6-211:16.0.6-221:16.0.6-231:16.0.6-241:16.0.6-251:16.0.6-261:16.0.6-271:16.0.6-27+hurd.11:16.0.6-27+x321:16.0.6-31:16.0.6-41:16.0.6-51:16.0.6-61:16.0.6-7 |
None known |
llvm-toolchain-17Debian:13 |
All versions, plus listed versions 1:17.0.6-221:17.0.6-23 |
None known |
llvm-toolchain-18Debian:13 |
All versions, plus listed versions 1:18.1.8-181:18.1.8-20 |
None known |
llvm-toolchain-19Debian:12 |
All versions, plus listed versions 1:19.1.0-11:19.1.0-21:19.1.0-31:19.1.0-3.11:19.1.0-4 Show 45 moreShow less1:19.1.0~++20240724103243+7af27be6633a-1~exp11:19.1.0~++rc2-1~exp11:19.1.0~++rc3-11:19.1.0~++rc3-1~exp11:19.1.0~++rc3-21:19.1.0~++rc4-11:19.1.0~++rc4-21:19.1.0~++rc4-31:19.1.0~++rc4-41:19.1.0~++rc4-51:19.1.1-11:19.1.1-1+powerpc1:19.1.2-11:19.1.2-1+hurd.11:19.1.2-1+hurd.21:19.1.2-1+powerpc1:19.1.2-1+powerpc.11:19.1.2-21:19.1.3-11:19.1.3-21:19.1.4-11:19.1.4-1~deb12u11:19.1.5-11:19.1.6-11:19.1.7-11:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-131:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-21:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-3~deb11u11:19.1.7-3~deb12u11:19.1.7-61:19.1.7-6+powerpc |
None known |
llvm-toolchain-19Debian:13 |
All versions, plus listed versions 1:19.1.7-101:19.1.7-10.11:19.1.7-111:19.1.7-121:19.1.7-13 Show 16 moreShow less1:19.1.7-141:19.1.7-151:19.1.7-161:19.1.7-171:19.1.7-181:19.1.7-191:19.1.7-201:19.1.7-221:19.1.7-31:19.1.7-3+hurd.11:19.1.7-61:19.1.7-6+powerpc1:19.1.7-71:19.1.7-7+hurd.11:19.1.7-81:19.1.7-9 |
None known |
llvmopenEuler:24.03-LTS-SP3 |
before 17.0.6-63.oe2403sp3 | 17.0.6-63.oe2403sp3 |
llvmopenEuler:22.03-LTS-SP4 |
before 12.0.1-8.oe2203sp4 | 12.0.1-8.oe2203sp4 |
llvmopenEuler:24.03-LTS |
before 17.0.6-15.oe2403 | 17.0.6-15.oe2403 |
llvmopenEuler:24.03-LTS-SP1 |
before 17.0.6-29.oe2403sp1 | 17.0.6-29.oe2403sp1 |
llvm-toolchain-11Ubuntu:20.04:LTS |
All versions, plus listed versions 1:11.0.0-2~ubuntu20.04.1 |
None known |
llvm-toolchain-12Ubuntu:20.04:LTS |
All versions, plus listed versions 1:12.0.0-3ubuntu1~20.04.31:12.0.0-3ubuntu1~20.04.41:12.0.0-3ubuntu1~20.04.5 |
None known |
llvm-toolchain-18Ubuntu:20.04:LTS |
All versions, plus listed versions 1:18.1.8-11~20.04.2 |
None known |
llvm-toolchain-11Ubuntu:22.04:LTS |
All versions, plus listed versions 1:11.0.1-2ubuntu51:11.1.0-6 |
None known |
llvm-toolchain-12Ubuntu:22.04:LTS |
All versions, plus listed versions 1:12.0.1-8build11:12.0.1-161:12.0.1-19ubuntu3 |
None known |
llvm-toolchain-13Ubuntu:22.04:LTS |
All versions, plus listed versions 1:13.0.0-21:13.0.0-91:13.0.1-2ubuntu11:13.0.1-2ubuntu21:13.0.1-2ubuntu2.11:13.0.1-2ubuntu2.2 |
None known |
llvm-toolchain-14Ubuntu:22.04:LTS |
All versions, plus listed versions 1:14.0.0~+rc1-11:14.0.0~+rc1-1ubuntu41:14.0.0~+rc4-1ubuntu11:14.0.0-1ubuntu11:14.0.0-1ubuntu1.1 |
None known |
llvm-toolchain-15Ubuntu:22.04:LTS |
All versions, plus listed versions 1:15.0.6-3~ubuntu0.22.04.21:15.0.7-0ubuntu0.22.04.11:15.0.7-0ubuntu0.22.04.21:15.0.7-0ubuntu0.22.04.3 |
None known |
llvm-toolchain-14Ubuntu:24.04:LTS |
All versions, plus listed versions 1:14.0.6-161:14.0.6-16build11:14.0.6-16build21:14.0.6-19build21:14.0.6-19build4 |
None known |
llvm-toolchain-15Ubuntu:24.04:LTS |
All versions, plus listed versions 1:15.0.7-101:15.0.7-10build11:15.0.7-10build21:15.0.7-10ubuntu11:15.0.7-111:15.0.7-14build11:15.0.7-14build3 |
None known |
llvm-toolchain-16Ubuntu:24.04:LTS |
All versions, plus listed versions 1:16.0.6-151:16.0.6-181:16.0.6-191:16.0.6-19build11:16.0.6-23ubuntu11:16.0.6-23ubuntu31:16.0.6-23ubuntu4 |
None known |
llvm-toolchain-17Ubuntu:24.04:LTS |
All versions, plus listed versions 1:17.0.2-1~exp1ubuntu2.11:17.0.5-1ubuntu11:17.0.5-1ubuntu21:17.0.6-21:17.0.6-3 Show 4 moreShow less1:17.0.6-5build11:17.0.6-9build21:17.0.6-9build31:17.0.6-9ubuntu1 |
None known |
llvm-toolchain-18Ubuntu:24.04:LTS |
All versions, plus listed versions 1:18.1.0~rc1-11:18.1.0~rc2-31:18.1.0~rc2-41:18.1.0~++20240126095841+0991d3c7b53d-1~exp11:18.1.2-1ubuntu21:18.1.2-1ubuntu31:18.1.3-11:18.1.3-1ubuntu1 |
None known |
llvm-toolchain-19Ubuntu:24.04:LTS |
All versions, plus listed versions 1:19.1.1-1ubuntu1~24.04.2 |
None known |
llvm-toolchain-14Ubuntu:25.10 |
All versions, plus listed versions 1:14.0.6-20ubuntu11:14.0.6-20ubuntu3 |
None known |
llvm-toolchain-17Ubuntu:25.10 |
All versions, plus listed versions 1:17.0.6-211:17.0.6-21build11:17.0.6-21build21:17.0.6-21ubuntu11:17.0.6-22build1 |
None known |
llvm-toolchain-18Ubuntu:25.10 |
All versions, plus listed versions 1:18.1.8-171:18.1.8-181:18.1.8-18build11:18.1.8-18ubuntu11:18.1.8-18ubuntu2 |
None known |
llvm-toolchain-19Ubuntu:25.10 |
All versions, plus listed versions 1:19.1.7-3ubuntu11:19.1.7-3ubuntu21:19.1.7-5ubuntu11:19.1.7-5ubuntu21:19.1.7-6ubuntu3 |
None known |
llvm-toolchain-17Ubuntu:26.10 |
All versions, plus listed versions 1:17.0.6-23ubuntu71:17.0.6-23ubuntu91:17.0.6-23ubuntu10 |
None known |
llvm-toolchain-17Ubuntu:26.04:LTS |
All versions, plus listed versions 1:17.0.6-22build11:17.0.6-23ubuntu21:17.0.6-23ubuntu31:17.0.6-23ubuntu41:17.0.6-23ubuntu7 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases, published | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
developer.arm.com/Arm%20Security%20Center/Cortex-M%20Security%20Extensions%20Vulnerability
nvd.nist.gov/vuln/detail/CVE-2024-7883
github.com/advisories/GHSA-vwj9-2733-p4wv
docs.bell-sw.com/security/cves/CVE-2024-7883
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791537402.html
security-tracker.debian.org/tracker/CVE-2024-7883
Show 7 moreShow less
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1968
ubuntu.com/security/CVE-2024-7883
cve.org/CVERecord?id=CVE-2024-7883
Left out here: 6 versions. The JSON record has them.