CVE-2025-36935: Out-of-bounds Write

In trustyffamemreclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-32355

Name of the Vulnerable Software and Affected Versions lib/sm/shared mem affected versions not specified Description The issue is related to improper input validation in the sm mem compat get vmm obj function of lib/sm/shared mem.c, which could allow arbitrary physical memory access. This could le...

CVE-2022-42534: Improper Input Validation

In trustyffamemreclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-26496

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper input validation in the trusty ffa mem reclaim function of shared-mem-smcall.c, which could lead to a local escalation of privilege. No additional execution privileges are needed, and...

CVE-2021-34382

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tzmapsharedmem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel...

PT-2021-20495

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to an integer overflow in the tz map shared mem function of the NVIDIA TLK kernel, which causes the request buffer and the logging buffer to overflow. This allows...

CVE-2021-34392

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tzmapsharedmem function can bypass boundary checks, which might lead to denial of service...

PT-2021-20505

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to an integer overflow in the tz map shared mem function within the NVIDIA TLK kernel, which can bypass boundary checks. This might lead to a denial of service...

PT-2021-20503

Name of the Vulnerable Software and Affected Versions: Trusty affected versions not specified Description: The issue is related to a lack of checks in the NVIDIA TLK kernel function, allowing the exploitation of an integer overflow. This can be triggered by a user through a specific SMC call,...

NVIDIA TLK input validation error vulnerability

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...