167 matches found
CVE-2024-22004
The CVE-2024-22004 entry affects Google Nest Wifi and a Linux Nonsecure OS. Root cause: an unchecked length issue in the Trusted Application path allows a privileged attacker to trigger a vulnerability. The described effect is leakage of secure memory from the Trusted Application, with a related ...
Google Nest 缓冲区错误漏洞
Google Nest is a smart home product by Google, an American company. A security vulnerability exists in Google Nest. An attacker exploited the vulnerability to leak the secure memory of a trusted application...
DEBIAN-CVE-2024-26618
In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Always exit smealloc early with existing storage When smealloc is called with existing storage and we are not flushing we will always allocate new storage, both leaking the existing storage and corrupting the state. Fi...
CVE-2023-4020
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
Design/Logic Flaw
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
CVE-2023-4020 Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
Silicon Labs TrustZone Input Validation Error Vulnerability
Silicon Labs TrustZone is a security software technology from Silicon Labs, Inc. Silicon Labs TrustZone suffers from an input validation error vulnerability that arises from a library function that does not perform user input validation, which could allow an attacker to read from a non-secure...
PT-2023-27319 · Silicon · Silicon Labs Trustzone
Name of the Vulnerable Software and Affected Versions: Silicon Labs TrustZone implementation affected versions not specified Description: The issue is related to an unvalidated input in a library function that handles communication between secure and non-secure memory in the Silicon Labs TrustZon...
PT-2023-30825 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is caused by a logic error in the code, allowing the secure world to write to NS memory. This could lead to local escalation of privilege, wit...
PT-2023-12740 · Suse · Suse
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a potential limited loss of guest memory integrity due to SMM configuration not being immutable as intended when SNP is enabled...
CVE-2023-24852
Memory Corruption in Core due to secure memory access by user while loading modem image...
Memory corruption
Memory Corruption in Core due to secure memory access by user while loading modem image...
CVE-2023-24852
CVE-2023-24852 describes memory corruption in the Core component when a user performs secure memory access during modem image loading. The vulnerability is local and impacts confidentiality, integrity, and availability (per CVSS metrics with LOCAL access, LOW attack complexity, NONE user interact...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a user performing a secure memory access while loading a modem image that results in core memory corruption...
PT-2023-19827 · Core · Core
Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core due to secure memory access by a user while loading a modem image. Recommendations: At the moment, there is no information about a newer versi...
SUSE CVE-2017-9526
In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key from side-channel observation during the signing process can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point...
CVE-2021-46851
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...
PT-2022-12943 · Unknown · Drm Module
Name of the Vulnerable Software and Affected Versions: DRM module affected versions not specified Description: The issue is related to a problem in the DRM module's verification of secure memory attributes. This could potentially lead to abnormal video playback if exploited. Recommendations: At t...
CVE-2021-46851
The CVE-2021-46851 entry concerns a vulnerability in the DRM module of Huawei HarmonyOS where verification of secure memory attributes can fail, potentially leading to abnormal video playback. Public sources consistently describe the DRM module as affected and the impact as a video playback anoma...
