217 matches found
optee_ftpm
OP-TEE integration for the MS TPM 2.0 Reference Implementation fTPM fTPM TA fTPM Trusted ApplicationTA는 MS 참조 구현을 사용하여 TPM의 안전한 펌웨어 구현을 제공합니다. 플랫폼별 통합 코드는 이 저장소에 보관됩니다. 이것은 OP-TEE와 함께 작동하도록 유지 관리되는 MS 참조 구현 샘플 ARM32-FirmwareTPM의 포크입니다. TA 빌드 이 TA는 OP-TEE 문서의 Trusted Applications 섹션에 설명된 대로 빌드되며,...
CVE-2019-1010298
CVE-2019-1010298 OP-TEE-2018-0011 seccampの講義で使用されました。...
CVE-2022-46152
CVE-2022-46152 OP-TEE OScleanupshmrefs 범위 외 읽기 — 재현 환경 참조: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 보안 권고: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 취약점 개요 필드| 세부 내용 ---|--- 취약점| cleanupshmrefs가 numparams를 검증하지 않음 이론상 최대 127; 실제로 Lin...
CVE-2026-33317
CVE-2026-33317 OP-TEE PKCS11 PoC このリポジトリには、CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9 に関するNormal Worldの概念実証（PoC）、再現手順、および取得したログが含まれています。 公式のOP-TEEアドバイザリでは、PKCS11CMDGETATTRIBUTEVALUE に対する entrygetattributevalue における検証欠落が説明されています。このバグにより、PKCS11...
optee-qemu
CVE-2021-44733: 리눅스 커널 TEE 서브시스템의 use-after-free 취약점 퍼징 및 익스플로잇 최근 리눅스 커널 TEE 서브시스템버전 5.15.11까지 포함에서 use-after-free 취약점이 발견되어 CVE-2021-44733 1이 할당되었습니다. 처음에는 여러 이유로 익스플로잇이 불가능해 보였지만, 취약한 코드 경로를 추가로 분석하고 개념 증명 익스플로잇을 구현한 결과 커널의 함수 포인터를 덮어쓸 수 있었습니다. 이 글에서는 권한 상승 페이로드를 제시하지 않지만, OPTEE와 익스플로잇을 실행하기 위...
SUSE CVE-2026-80524
In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...
CVE-2026-80524
A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099790)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099790 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100743)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100743 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
DEBIAN-CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
UBUNTU-CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
UBUNTU-CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
UBUNTU-CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
CVE-2026-71969 OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...