When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure     state via floating-point registers when a Secure to Non-secure function call is made that returns a     floating-point value and when this is the first use of floating-point since entering Secure state. This     allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality.
    This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)

Tenable has extracted the preceding description block directly from the EulerOS llvm security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack  contents can be leaked to Non-secure     state via floating-point registers  when a Secure to Non-secure function call is made that returns a     floating-point value and when this is the first use of floating-point  since entering Secure state. This     allows an attacker to read a limited  quantity of Secure stack contents with an impact on confidentiality.
    This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)

Tenable has extracted the preceding description block directly from the EulerOS llvm security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
235404	EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1428)	Nessus	Huawei Local Security Checks	low
235394	EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1427)	Nessus	Huawei Local Security Checks	low
233625	EulerOS 2.0 SP13 : llvm (EulerOS-SA-2025-1319)	Nessus	Huawei Local Security Checks	low
233612	EulerOS 2.0 SP13 : llvm (EulerOS-SA-2025-1336)	Nessus	Huawei Local Security Checks	low

Detections

Analytics

CVE-2024-7883

low

Tenable Plugins

low

low

low

low