Cortex-X3 vulnerabilities

3 known vulnerabilities in Cortex-X3 from Arm. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  C1-Ultra: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-10263Jun 9, 2026Arm

  Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources

• 7.9 High severity

  Neoverse-N2: Sensitive Information in Resource Not Removed Before Reuse

  CVE-2025-0647Jan 14, 2026Arm

  In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. In this case, the PE may retain stale TLB entries

• 9.8 Critical severity

  Cortex-A77: Exposure of Resource to Wrong Sphere

  CVE-2024-5660Dec 10, 2024Arm

  Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neovers