Cyber Resilience

CVE-2024-11864

High

Published: 14 January 2025

Published
14 January 2025
Modified
23 December 2025
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0042 62.2th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-11864 is a high-severity Improper Handling of Exceptional Conditions (CWE-755) vulnerability in Arm Scp Firmware. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 37.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-11 (Error Handling).

Deeper analysis

CVE-2024-11864 affects the System Control Processor (SCP) in devices running SCP-Firmware release versions up to and including 2.15.0. The vulnerability arises from specifically crafted SCMI (System Control Processor Management Interface) messages that trigger a Usage Fault, causing the SCP to crash. It is rated with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is associated with CWE-755 (Improper Handling of Exceptional Conditions).

Attackers can exploit this vulnerability remotely over the network with low attack complexity, requiring no authentication privileges, user interaction, or special conditions. Any unauthenticated remote actor capable of sending SCMI messages to the affected SCP can induce a denial-of-service condition by crashing the processor, disrupting availability without impacting confidentiality or integrity.

Mitigation details and patches are documented in the Arm Security Center advisory for SCP-Firmware vulnerabilities CVE-2024-11863 and CVE-2024-11864, available at https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability%20CVE-2024-11863-11864. Security practitioners should consult this reference for upgrade guidance to resolved versions beyond 2.15.0.

EU & UK References

Vulnerability details

Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP

CWE(s)
CWE-755

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

Direct remote exploitation of improper exception handling in SCP firmware via SCMI messages to trigger a crash and deny service availability.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2026-8162Shared CWE-755
CVE-2026-44902Shared CWE-755
CVE-2026-23666Shared CWE-755
CVE-2026-21906Shared CWE-755
CVE-2026-27195Shared CWE-755
CVE-2026-40074Shared CWE-755
CVE-2025-0647Same vendor: Arm
CVE-2026-34872Same vendor: Arm
CVE-2025-47917Same vendor: Arm
CVE-2025-0015Same vendor: Arm

Affected Assets

arm
scp firmware
≤ 2.16.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-11 Error Handling good match
prevent

SI-11 directly addresses the CWE-755 improper handling of exceptional conditions in SCP firmware that leads to Usage Fault crashes from crafted SCMI messages.

SI-10 Information Input Validation good match
prevent

SI-10 enforces validation of SCMI message inputs to block specifically crafted messages that trigger the SCP crash.

SI-2 Flaw Remediation good match
preventrecover

SI-2 requires timely flaw remediation by applying patches to SCP-Firmware versions beyond 2.15.0 as advised in the Arm Security Center.

References