CVE-2021-32032

In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can prevent the abort() operation in the associated cryptographic library from freeing internal resources, causing a memory leak.

• CWE-401

• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/commit/?id=7e2e523a1c4e9ac7b9cc4fd551831f7639ed5ff9Mailing List, Patch, Third Party Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/crypto_multi_part_ops_abort_fail.rstExploit, Third Party Advisory
• https://www.trustedfirmware.orgVendor Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/commit/?id=7e2e523a1c4e9ac7b9cc4fd551831f7639ed5ff9Mailing List, Patch, Third Party Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/crypto_multi_part_ops_abort_fail.rstExploit, Third Party Advisory
• https://www.trustedfirmware.orgVendor Advisory

Published

May 21, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32024A remote code execution vulnerability in the BMP image codec…9.8
• CVE-2021-32025An elevation of privilege vulnerability in the QNX Neutrino …7.8
• CVE-2021-32027A flaw was found in postgresql in versions before 13.3, befo…8.8
• CVE-2021-32028A flaw was found in postgresql. Using an INSERT ... ON CONFL…6.5
• CVE-2021-32029A flaw was found in postgresql. Using an UPDATE ... RETURNIN…6.5
• CVE-2021-32030The administrator application on ASUS GT-AC2900 devices befo…9.8
• CVE-2021-32033Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler …4.6
• CVE-2021-32036An authenticated user without any specific authorizations ma…7.1
• CVE-2021-32037An authorized user may trigger an invariant which may result…6.5
• CVE-2021-32039Users with appropriate file access may be able to access une…5.5
• CVE-2021-3204SSRF in the document conversion component of Webware Webdesk…6.5
• CVE-2021-32040It may be possible to have an extremely long aggregation pip…7.5