CVE-2025-10263

Who is affected

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A.

Real-world impact

An attacker could overwrite protected memory or configuration, potentially taking control of the device or corrupting its operation.

Why this severity

The CVSS score of 9.1 reflects that the flaw is network‑exposed, requires no authentication, and gives the attacker full confidentiality and integrity compromise. The low attack complexity and lack of user interaction make it highly dangerous.

What to do about it