751 matches found
CVE-2022-26942
The CVE-2022-26942 entry concerns Motorola MTM5000 series firmware with missing pointer validation in two Trusted Execution Environment TEEs (KVL key management module and TETRA cryptographic module). The issue enables a non-secure supervisor level attacker to achieve secure supervisor code execu...
CVE-2022-25333 Flawed SK_LOAD module authenticity check in Texas Instruments OMAP L138
The Texas Instruments OMAP L138 secure variants trusted execution environment TEE performs an RSA check implemented in mask ROM when loading a module through the SKLOAD routine. However, only the module header authenticity is validated. An adversary can re-use any correctly signed header and appe...
CVE-2022-25333
The CVE-2022-25333 entry concerns the Texas Instruments OMAP L138 secure-variant TEE. The RSA check in the SK_LOAD routine validates only the module header authenticity, allowing an adversary to reuse a signed header with a forged payload decrypted using the CEK, enabling arbitrary code execution...
CVE-2022-26942: Untrusted Pointer Dereference
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment TEE modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure superviso...
CVE-2023-22382
Weak configuration in Automotive while VM is processing a listener request from TEE...
CVE-2023-22382 Improper Input Validation in Automotive
Weak configuration in Automotive while VM is processing a listener request from TEE...
CVE-2023-22382
CVE-2023-22382 concerns a weak configuration in the Automotive stack when a VM processes a listener request from a Trusted Execution Environment (TEE). Documents indicate the issue lies in the Automotive VM/TEE interaction with a broad impact, including high confidentiality, integrity, and availa...
CVE-2023-22382: Improper Input Validation
Weak configuration in Automotive while VM is processing a listener request from TEE...
CVE-2023-41325
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
Double free
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
CVE-2023-41325 OP-TEE double free in shdr_verify_signature
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
CVE-2023-41325
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
CVE-2023-41325 OP-TEE double free in shdr_verify_signature
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
CVE-2023-41325
OP-TEE (Trusted Execution Environment) has a double-free condition in shdr_verify_signature across versions 3.20–3.21, triggered during RSA key memory allocation in sw_crypto_acipher_alloc_rsa_public_key when verifying a TA binary signature. The bug can free memory twice (e) due to non-atomic all...
CVE-2023-41325: Double Free
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdrverifysignature can make a double free. shdrverifysignature used to verify a TA...
CVE-2023-21651
Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...
Memory corruption
Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...
CVE-2023-21651 Incorrect Type Conversion or Cast in Core
Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...
CVE-2023-21651
CVE-2023-21651 affects Qualcomm closed‑source components, described as memory corruption in Core due to an incorrect type conversion or cast in the secure_io_read/write function in TEE. The vulnerability stems from the type handling in secure I/O, enabling memory corruption within the core when p...