Live › vulnerability › CVE-2021-27562
Go to dashboardArm Trusted Firmware has an out-of-bounds write that lets code running in the non-secure world halt the system, overwrite secure data, or print secure data through secure function calls. CISA lists it as actively exploited, and the description says it affects Yealink Device Management servers.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Arm Trusted Firmware | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply updates per vendor instructions; the sources do not name a fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-27562")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.