CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2023-31326

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment TEE driver, potentially leading to loss of confidentiality...

CVE-2023-31322

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application RAS TA potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability...

CVE-2021-46750

Failure to validate the address and size in TEE Trusted Execution Environment may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR Trusted Memory Region that was previously allocated by the ASP bootloader leading to a potential los...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

RICOH Streamline NX vulnerable to tampering with operation history

Overview RICOH Streamline NX provided by Ricoh Company, Ltd. contains the following vulnerability. Use of Less Trusted Source CWE-348 - CVE-2025-58422 Ricoh Company, Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Ricoh Company, Ltd. coordinated...

CVE-2021-26383

Insufficient bounds checking in AMD TEE Trusted Execution Environment could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability...

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2025-0034

CVE-2025-0034 concerns the TEE SOC Driver. The root cause is insufficient parameter sanitization, enabling an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART that can read or write past the end of allocated arrays, potentially compromising platform integrity or causing a denial of...

CVE-2024-36354

CVE-2024-36354 covers improper input validation of DIMM SPD metadata that can bypass SMM isolation and lead to arbitrary code execution at the SMM level. Affected: AMD client/server/embedded processors with non‑compliant DIMMs; root cause is SPD metadata input validation weakness allowing bypass ...

CVE-2023-31322

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application RAS TA potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability...

CVE-2023-31326

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment TEE driver, potentially leading to loss of confidentiality...

CVE-2023-31326

CVE-2023-31326 concerns AMD components where the root cause is uninitialized variable usage in the ASP, which could allow an attacker to access leftover data from a trusted execution environment (TEE) driver and potentially cause confidentiality loss. The issue spans AMD Client and Embedded Proce...

CVE-2023-31322

CVE-2023-31322 is described as a type confusion in the ASP that could let an attacker pass a malformed argument to the Reliability, Availability, and Serviceability (RAS) trusted application, potentially enabling local read/write to shared memory and leading to loss of confidentiality and integri...

CVE-2023-31322

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application RAS TA potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability...

CVE-2021-46750

Failure to validate the address and size in TEE Trusted Execution Environment may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR Trusted Memory Region that was previously allocated by the ASP bootloader leading to a potential los...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

CVE-2021-46750

CVE-2021-46750 describes a failure to validate address and size in a Trusted Execution Environment (TEE) that could allow a local x86 attacker to send malformed messages to the graphics mailbox, causing overlap of a previously allocated Trusted Memory Region (TMR) by the ASP bootloader and potent...

CVE-2021-46750

Failure to validate the address and size in TEE Trusted Execution Environment may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR Trusted Memory Region that was previously allocated by the ASP bootloader leading to a potential los...