TEE-reversing

Nozioni di base e generali sui TEE Introduzione al Trusted Execution Environment: la TrustZone di ARM https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html Introduzione ai TEE titolo originale: TEEを中心とするCPUセキュリティ機能の動向...

CVE-2019-1010298

CVE-2019-1010298 OP-TEE-2018-0011 Utilizzato nella lezione seccamp...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Escalation Locale dei Privilegi nel Kernel Linux TC pedit + IPsec TEE Corruzione della Cache di Pagina · Kernel interessati: ≤ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '|...

CVE-2018-9411

CVE-2018-9411 Exploit-Code für CVE-2018-9411 für MediaCasService. Beachten Sie, dass dieser Exploit nur zu Bildungs- oder Verteidigungszwecken bereitgestellt wird; er ist nicht für böswillige oder angreifende Nutzung gedacht. Der vollständige Bericht über die Schwachstelle und den Exploit ist auf...

optee-qemu

CVE-2021-44733: Fuzzing e sfruttamento di una use-after-free nel sottosistema TEE del kernel Linux Recentemente è stata scoperta una vulnerabilità use-after-free nel sottosistema TEE del kernel Linux, fino alla versione 5.15.11 inclusa, alla quale è stato assegnato l'ID CVE-2021-44733 1. A prima...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Leitura Fora dos Limites — Ambiente de Reprodução Referência: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Advisory de Segurança: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Visão Geral da...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...

CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC Questo repository contiene la proof of concept per il Normal World, le note di riproduzione e i log catturati per CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. L'avviso ufficiale OP-TEE descrive una validazione mancante in entrygetattributevalue per...

DirtyClone

DirtyClone CVE-2026-43503 - PoC Python Porting Python non ufficiale di DirtyClone — una vulnerabilità di escalation dei privilegi locali nel kernel Linux. Questo repository contiene un Proof of Concept funzionante che consente a un utente locale non privilegiato di ottenere privilegi di root...

optee_ftpm

Integrazione OP-TEE per il MS TPM 2.0 Reference Implementation fTPM fTPM TA L'fTPM Trusted Application TA fornisce un'implementazione firmware sicura di un TPM utilizzando la MS reference implementation. Il codice di integrazione specifico della piattaforma è mantenuto in questo repository. Quest...

CVE-2026-43503

CVE-2026-43503 DirtyClone - PoC - SecurewithUmer POC von DirtyClone – eine lokale Privilege-Escalation-Schwachstelle im Linux-Kernel. Dieses Repository enthält einen funktionierenden Proof of Concept , der es einem nicht privilegierten lokalen Benutzer ermöglicht, Root-Rechte zu erlangen, indem e...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...

CVE-2026-71967

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

DEBIAN-CVE-2026-71968

OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...

CVE-2026-71968

OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...

CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...

CVE-2026-71969

OP-TEE OS 4.10.0 contains a buffer underwrite in the RSA NOPAD encrypt/decrypt path (mbedTLS backend and SE050 driver). When src_len > rsa_len, the subtraction wraps to a large unsigned value, causing a memcpy to write attacker-controlled data into secure-world heap memory in S-EL1. The vulner...

CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...

CVE-2026-71969 OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...

CVE-2026-71969 OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...