Awesome-MoAI-Security

モバイルオンデバイスAIセキュリティのすごいリソース集 SoK: モバイルオンデバイスAIシステムの攻撃と防御の全体像 モバイルオンデバイスAIシステムは、LiteRT/TFLite 、Core ML 、ExecuTorch 、ONNX などのMLフレームワークとハードウェアバックアップアクセラレータを通じて、AIモデルをローカルで実行します。このリポジトリは、オンデバイスモデルのローカル保存が新たなセキュリティリスクをもたらすため、そのようなシステムを理解し保護するために必要なセキュリティ研究を追跡します。 モバイルオンデバイスAIシステムの概要 目次 読書ロードマップ 分類の概要...

GoTEE

简介 GoTEE 框架实现了基于 TamaGo 的 unikernel 在特权和非特权模式下的并发实例化，它们通过监控器模式和自定义系统调用相互交互。 凭借这些能力，GoTEE 实现了基于 TamaGo 的可信执行环境（TEE），为 ARM TrustZone 安全世界或 RISC-V 监管者执行环境中的裸机执行带来了 Go 语言的内存安全性、便利性和能力。 GoTEE 可以监管实现了 GoTEE API 的、基于纯 Go、Rust 或 C 的独立式可信小程序（Trusted Applet），以及任何能够在 ARM TrustZone 普通世界或 RISC-V S 模式下运行的操作系统，...

GoTEE-example

Introducción El framework GoTEE implementa la instanciación concurrente de unikernels basados en TamaGo en modos privilegiado y no privilegiado, los cuales interactúan entre sí mediante el modo monitor y llamadas al sistema personalizadas. Con estas capacidades, GoTEE implementa un Entorno de...

RAMnesia-Attack

本研究は、DDR5メモリを使用した最新のコンピューターシステムのハードウェアメモリに対する2つの重要な攻撃クラス（ Phoenix Rowhammer Attack（CVE-2025-6202） および RAMnesia Attack（CVE-2023-39910） ）の包括的な分析を提示します。両方の攻撃は、暗号化マテリアルの処理と保存における根本的な脆弱性を示し、ビットコインウォレットの秘密鍵を回復するための前例のない侵害ベクトルを作り出します。この研究は、2025年10月に開示されたWireTap攻撃およびTEE.fail攻撃で実証された、Intel SGX、AMD...

AndroidSecurityEvolution

Android 安全演进 自 Android 5.0 Lollipop （API 21）起，各主要 Android 版本的重要安全增强。 Android 5.0（API 21）- Lollipop Android 5 安全增强 自 2023 年 8 月起，该 Android 版本将只能收到 Google Play Services 更新，参见 Google Play services discontinuing updates for KitKat API levels 19 & 20 starting August 2023 默认启用全盘加密（FDE）（制造商仍可选择关闭），参见加密和...

EUVD-2026-83194

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92318

Name of the Vulnerable Software and Affected Versions Trusted Execution Environment affected versions not specified Description Improper input validation in the Trusted Execution Environment can lead to memory corruption. This issue allows for local escalation of privilege, requiring System...

CVE-2026-56932: Improper Input Validation

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...

Astra Linux – Vulnerability in mbedtls

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability exists in the decoding of Base64 PEM files. This vulnerability allows system-level administrator attackers to obtain information about secret RSA keys through a controlled-channel and side-channel attack on software running in...

PUB-A-510136422

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

cmcp v0.4.0

cMCP: Confidential MCP Runtime Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential Computing Summit, June 23 2026. May have breaking changes before v1.0. See...

CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

CVE-2026-45198

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

EUVD-2026-54346

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...