PoC_CVE-2025-48507

Zynq UltraScale+ MPSoCにおけるTrustZoneの侵害 - CVE-2025-48507およびCVE-2025-0038の概念実証 非セキュアソフトウェアは、CVE-2025-48507およびCVE-2025-0038を悪用して、Zynq UltraScale+プラットフォーム 上のセキュアワールドへの読み取り/書き込みアクセスを取得し、TrustZoneの分離を破ることができます。そのために、非セキュアソフトウェアはCVE-2025-0038とCVE-2025-48507...

CVE-2023-49100

Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdeiinterruptbind. The parameter is passed to a call to platicgetinterrupttype. It can be any arbitrary value passing...

CVE-2025-48507: Improper Validation of Specified Quantity in Input

The security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC...

CVE-2021-47229

In the Linux kernel, the following vulnerability has been resolved: PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not yet completed which is indicated by value 1 in PIOSTART causes an...

CVE-2021-47229

In the Linux kernel, the following vulnerability has been resolved: PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not yet completed which is indicated by value 1 in PIOSTART causes an...

CVE-2021-47229

CVE-2021-47229 concerns the Linux kernel PCI aardvark driver. A kernel panic could occur when a new PIO transfer is started before the previous one finished; the kernel will issue an External Abort/SSeror interrupt leading to a reboot. The root cause analysis noted a previously added Trusted Firm...

CVE-2023-49100

Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdeiinterruptbind. The parameter is passed to a call to platicgetinterrupttype. It can be any arbitrary value passing...

CVE-2023-49100

Trusted Firmware-A (TF-A) before version 2.10 is vulnerable to a potential read out-of-bounds in the SDEI service . The root cause is insufficient validation of the input parameter passed in register x1 within the sdei_interrupt_bind function, which is subsequently used in a call to plat_ic_get_i...