GoTEE-example

引言 GoTEE 框架实现了基于 TamaGo 的 unikernel 在特权与非特权模式下的并发实例化，它们通过监视器模式和自定义系统调用相互交互。 凭借这些能力，GoTEE 实现了基于 TamaGo 的可信执行环境（TEE），将 Go 的内存安全性、便利性和能力引入到 ARM TrustZone 安全世界或 RISC-V Supervisor 执行环境中的裸机执行。 GoTEE 可以监督基于纯 Go、Rust 或 C 的独立式可信小程序（Trusted Applets）实现 GoTEE API，也可以监督任何能够在 ARM TrustZone 普通世界或 RISC-V S...

RAMnesia-Attack

本研究对使用DDR5内存的现代计算机系统的硬件内存上的两类关键攻击进行了全面分析： Phoenix Rowhammer攻击（CVE-2025-6202） 和 RAMnesia攻击（CVE-2023-39910） 。这两种攻击都展示了加密材料处理与存储中的基本漏洞，为恢复比特币钱包私钥创造了前所未有的利用途径。该研究整合了对可信执行环境（TEE）攻击的分析结果，包括Intel SGX、AMD SEV-SNP和NVIDIA Confidential...

AndroidSecurityEvolution

Android セキュリティの進化 最近の主要なAndroidバージョンにおける重要なセキュリティ強化を、 Android 5.0 Lollipop （API 21）以降について解説します。 Android 5.0 API 21 - Lollipop Android 5 のセキュリティ強化 2023年8月以降、 Google Play 開発者サービス のアップデートはこのAndroidバージョンでのみ受け取れるようになります。2023年8月よりKitKat（APIレベル19および20）向けGoogle Play開発者サービスアップデート提供終了 を参照してください...

GoTEE

简介 GoTEE 框架实现了基于 TamaGo 的 unikernel 在特权和非特权模式下的并发实例化，它们通过监控器模式和自定义系统调用相互交互。 凭借这些能力，GoTEE 实现了基于 TamaGo 的可信执行环境（TEE），为 ARM TrustZone 安全世界或 RISC-V 监管者执行环境中的裸机执行带来了 Go 语言的内存安全性、便利性和能力。 GoTEE 可以监管实现了 GoTEE API 的、基于纯 Go、Rust 或 C 的独立式可信小程序（Trusted Applet），以及任何能够在 ARM TrustZone 普通世界或 RISC-V S 模式下运行的操作系统，...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932: Improper Input Validation

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92318

Name of the Vulnerable Software and Affected Versions Trusted Execution Environment affected versions not specified Description Improper input validation in the Trusted Execution Environment can lead to memory corruption. This issue allows for local escalation of privilege, requiring System...

Astra Linux – Vulnerability in mbedtls

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability exists in the decoding of Base64 PEM files. This vulnerability allows system-level administrator attackers to obtain information about secret RSA keys through a controlled-channel and side-channel attack on software running in...

PUB-A-510136422

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

cmcp v0.4.0

cMCP: Confidential MCP Runtime Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential Computing Summit, June 23 2026. May have breaking changes before v1.0. See...

CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

CVE-2026-45198

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

EUVD-2026-54346

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...

The vulnerability of the tee_shm_register_user_buf() function in the drivers/tee/tee_shm.c module of the Linux kernel’s trusted execution environment allows a attacker to cause a service failure.

The vulnerability of the teeshmregisteruserbuf function in the drivers/tee/teeshm.c module of the Linux kernel’s trusted execution environment is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-42546

A flaw was found in OP-TEE, a Trusted Execution Environment TEE for Arm Cortex-A cores. A resource leak exists in the shared memory cleanup logic where the system fails to properly release memory objects when processing non-contiguous memory parameters from a normal-world caller. Over time, these...