CVE-2020-13844

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

• CWE-203

• http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.htmlMailing List, Third Party Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityVendor Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculationVendor Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questionsVendor Advisory
• https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.htmlPatch, Third Party Advisory
• http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.htmlMailing List, Third Party Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityVendor Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculationVendor Advisory
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questionsVendor Advisory
• https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.htmlPatch, Third Party Advisory

Published

Jun 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13839An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2020-1384An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-13840An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2020-13841An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2020-13842An issue was discovered on LG mobile devices with Android OS…7.8
• CVE-2020-13843An issue was discovered on LG mobile devices with Android OS…5.5
• CVE-2020-13845Sylabs Singularity 3.0 through 3.5 has Improper Validation o…7.5
• CVE-2020-13846Sylabs Singularity 3.5.0 through 3.5.3 fails to report an er…7.5
• CVE-2020-13847Sylabs Singularity 3.0 through 3.5 lacks support for an Inte…7.5
• CVE-2020-13848Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows re…7.5
• CVE-2020-13849The MQTT protocol 3.1.1 requires a server to set a timeout v…7.5
• CVE-2020-1385An elevation of privilege vulnerability exists in the way th…7.8