663 matches found
The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm chips allows a hacker to execute arbitrary code.
The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm chips is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Cisco Products Affected by Broadcom MediaxChange Buffer Overflow (CVE-2021-33478)
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...
CVE-2023-4280
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
Information disclosure
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
CVE-2023-4280
Silicon Labs Gecko SDK, v4.3.x and earlier, contains an unvalidated input issue in the TrustZone implementation that lets an attacker access the trusted memory region from the untrusted region. Affected component: TrustZone in Gecko SDK. Root cause: unvalidated input allowing cross-region access....
CVE-2023-4280 Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
CVE-2023-4280 Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
CVE-2023-4280 Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
PT-2024-13059 · Silicon · Gecko Sdk
Name of the Vulnerable Software and Affected Versions: Gecko SDK versions 4.3.x and earlier Description: The issue is related to an unvalidated input in the Silicon Labs TrustZone implementation, allowing an attacker to access the trusted region of memory from the untrusted region. Recommendation...
Silicon Labs TrustZone Security Vulnerability
Silicon Labs TrustZone is a security software technology from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs TrustZone v4.3.x and earlier versions that originated from allowing unauthenticated input and can be exploited by an attacker to gain access to trusted memory from...
CVE-2023-4020
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
Design/Logic Flaw
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
CVE-2023-4020
Summary: CVE-2023-4020 involves Silicon Labs TrustZone where an unvalidated input in a memory-communication library function allows reading/writing secure memory from non-secure memory. The issue is confirmed across multiple sources (NVD, Red Hat) describing an input-validation flaw in the TrustZ...
CVE-2023-4020 Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
CVE-2023-4020 Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
Silicon Labs TrustZone Input Validation Error Vulnerability
Silicon Labs TrustZone is a security software technology from Silicon Labs, Inc. Silicon Labs TrustZone suffers from an input validation error vulnerability that arises from a library function that does not perform user input validation, which could allow an attacker to read from a non-secure...
PT-2023-27319 · Silicon · Silicon Labs Trustzone
Name of the Vulnerable Software and Affected Versions: Silicon Labs TrustZone implementation affected versions not specified Description: The issue is related to an unvalidated input in a library function that handles communication between secure and non-secure memory in the Silicon Labs TrustZon...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an improperly restricted operation within a memory buffer range in TZ Secure OS...
kernel: wifi: ath11k: fix deinitialization of firmware resources
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11kahbfwresourcesinit, iommu domain mapping is done only for the chipsets having fixed firmware memory. Also, for such chipsets, mapping is done only if it...
kernel: wifi: ath11k: fix deinitialization of firmware resources
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11kahbfwresourcesinit, iommu domain mapping is done only for the chipsets having fixed firmware memory. Also, for such chipsets, mapping is done only if it...