Lucene search
PRIOn knowledge basePRION:CVE-2022-25333HistoryOct 19, 2023 - 10:15 a.m.
Code injection
2023-10-1910:15:00
PRIOn knowledge base
www.prio-n.com
2
texas instruments
omap l138
trusted execution environment
rsa check
mask rom
sk_load
header authenticity
cek
cve-2022-25332
arbitrary code execution
tee security architecture
The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validated. An adversary can re-use any correctly signed header and append a forged payload, to be encrypted using the CEK (obtainable through CVE-2022-25332) in order to obtain arbitrary code execution in secure context. This constitutes a full break of the TEE security architecture.
References
Related
nvd
nvd
cve
cve
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-10-19 10:15:00
Stack overflow
2023-10-19 10:15:00