C1-Ultra vulnerabilities

2 known vulnerabilities in C1-Ultra from Arm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  C1-Ultra: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-10263Jun 9, 2026Arm

  Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources

• 7.9 High severity

  Neoverse-N2: Sensitive Information in Resource Not Removed Before Reuse

  CVE-2025-0647Jan 14, 2026Arm

  In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries