VULNERABILITY INTELLIGENCE
CVE-2020-1459
CVSS score7.5 HIGH
EPSS probability4.47%
CISA KEVNot currently listed
Published2020-08-17
Last modified2026-06-17
Description
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation." To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application. The security update addresses the vulnerability by bypassing the speculative execution.