Skip to content
OpenAdvisories

Product · Caliptra

Core Runtime Firmware

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-7328

    Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service

    Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AX…

    Caliptra Core Runtime Firmware
  • Medium 5.1
    CVE-2026-6458

    AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty

    Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results in an incorrect GCM authentication tag. When the streaming AES-256-GCM API is used with empty AAD, the hardware GHASH accumulator state is not saved after the first updat…

    Caliptra Core Runtime Firmware