CVE-2021-40327

Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.

• CWE-862

• https://developer.arm.com/support/arm-security-updatesThird Party Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/Patch, Vendor Advisory
• https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/profile_small_key_id_encoding_vulnerability.htmlPatch, Vendor Advisory
• https://developer.arm.com/support/arm-security-updatesThird Party Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/Patch, Vendor Advisory
• https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/profile_small_key_id_encoding_vulnerability.htmlPatch, Vendor Advisory

Published

Jan 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40317Piwigo 11.5.0 is affected by a SQL injection vulnerability v…8.8
• CVE-2021-4032A vulnerability was found in the Linux kernel's KVM subsyste…4.4
• CVE-2021-40323Cobbler before 3.3.0 allows log poisoning, and resultant Rem…9.8
• CVE-2021-40324Cobbler before 3.3.0 allows arbitrary file write operations …7.5
• CVE-2021-40325Cobbler before 3.3.0 allows authorization bypass for modific…7.5
• CVE-2021-40326Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and…5.5
• CVE-2021-40329The Authentication API in Ping Identity PingFederate before …9.8
• CVE-2021-4033kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)6.5
• CVE-2021-40330git_connect_git in connect.c in Git before 2.30.1 allows a r…7.5
• CVE-2021-40331An Incorrect Permission Assignment for Critical Resource vul…8.1
• CVE-2021-40333Weak Password Requirements vulnerability in Hitachi Energy F…7.1
• CVE-2021-40334Missing Handler vulnerability in the proprietary management …7.5