CVEvulnerability
CVE-2022-37459
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-203
Description
Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.
Affected configurations
• amperecomputing ampere altra firmware (< 1.08g)
• amperecomputing ampere altra max firmware (< 2.05a)
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- https://amperecomputing.com/products/security-bulletins/retbleed.html Vendor Advisory
- https://developer.arm.com/documentation/ka005138/1-0/ Third Party Advisory
- https://amperecomputing.com/products/security-bulletins/retbleed.html Vendor Advisory
- https://developer.arm.com/documentation/ka005138/1-0/ Third Party Advisory