CVE-2022-37459

7.8 highEPSS 0.2%

High (7.8) in amperecomputing. EPSS 0.2% chance of exploitation in the next 30 days.

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2022-08-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amperecomputing:ampere_altra_firmware
amperecomputing:ampere_altra_max_firmware

References

https://amperecomputing.com/products/security-bulletins/retbleed.html
https://developer.arm.com/documentation/ka005138/1-0/
https://amperecomputing.com/products/security-bulletins/retbleed.html
https://developer.arm.com/documentation/ka005138/1-0/

Check your stack JSON