TEE-reversing

TEE 기초 및 일반 TEETrusted Execution Environment 소개: ARM의 TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html TEE 소개 원제: TEEを中心とするCPUセキュリティ機能の動向 https://seminar-materials.iijlab.net/iijlab-seminar/iijlab-seminar-20181120.pdf ARM TrustZone 공격...

GoTEE-example

はじめに GoTEEフレームワークは、TamaGoベースのユニカーネルを特権モードと非特権モードで同時にインスタンス化し、モニターモードとカスタムシステムコールを介して相互にやり取りします。 これらの機能により、GoTEEはTamaGoベースのTrusted Execution Environments（TEE）を実装し、ARM TrustZone Secure WorldまたはRISC-V Supervisor Execution Environments内のベアメタル実行にGoのメモリ安全性、利便性、および機能をもたらします。 GoTEEは、GoTEE...

cachegrab

Cachegrab Cachegrab은 TrustZone 지원 ARMv8 코어의 보안 월드에서 소프트웨어에 대한 트레이스 기반 캐시 공격을 수행하고 시각화하는 데 도움을 주도록 설계된 도구입니다. Cachegrab이 내부적으로 어떻게 작동하는지에 대한 개요는 Cachegrab 릴리스 발표를 참조하십시오. Android에서 Cachegrab 사용하기 Android 기기에서 Cachegrab을 사용할 수 있습니다. 최신 버전의 Android에서는 커널 모듈을 허용하지 않으므로 CONFIGMODULES 및...

PoC_CVE-2025-48507

Zynq UltraScale+ MPSoCs에서 TrustZone 무력화 - CVE-2025-48507 및 CVE-2025-0038에 대한 개념 증명 비보안 소프트웨어는 CVE-2025-48507 및 CVE-2025-0038을 악용하여 Zynq UltraScale+ 플랫폼 에서 Secure World에 대한 읽기/쓰기 액세스 권한을 얻을 수 있으며, 이를 통해 TrustZone 격리를 무력화합니다. 이를 위해 비보안 소프트웨어는 CVE-2025-0038 및 CVE-2025-48507 을 악용하여 IOUAXIWPRTCN 및...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone 커널 권한 상승...

GoTEE

소개 GoTEE 프레임워크는 TamaGo 기반 유니커널을 권한privileged 및 비권한unprivileged 모드로 동시에 인스턴스화하며, 각 유니커널은 모니터 모드와 커스텀 시스템 콜을 통해 서로 상호작용합니다. 이러한 기능을 통해 GoTEE는 TamaGo 기반 TEETrusted Execution Environment를 구현하여, ARM TrustZone Secure World 또는 RISC-V Supervisor Execution Environment 내 베어 메탈 실행에 Go의 메모리 안전성, 편의성 및 기능을...

Linux Distros Unpatched Vulnerability : CVE-2026-41434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

Linux Distros Unpatched Vulnerability : CVE-2026-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

CVE-2026-53763

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the...

CVE-2026-41515

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses...

DEBIAN-CVE-2026-41514

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses...

EUVD-2026-41908

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver...

CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

UBUNTU-CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

EUVD-2026-41891

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one erro...

PT-2026-55976

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.20.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. A flaw in the subkey rollback...

PT-2026-55959

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.10.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. An unbounded recursion can cause the...

PT-2026-55972

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error paths...

PT-2026-55975

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.3.0 through 4.10.x Description A resource leak exists in the shared memory cleanup logic of OP-TEE, a Trusted Execution Environment designed for Arm Cortex-A cores using TrustZone technology. The function cleanup shm refs in...

PT-2026-55974

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error...