GoTEE

简介 GoTEE 框架实现了基于 TamaGo 的 unikernel 在特权和非特权模式下的并发实例化，它们通过监控器模式和自定义系统调用相互交互。 凭借这些能力，GoTEE 实现了基于 TamaGo 的可信执行环境（TEE），为 ARM TrustZone 安全世界或 RISC-V 监管者执行环境中的裸机执行带来了 Go 语言的内存安全性、便利性和能力。 GoTEE 可以监管实现了 GoTEE API 的、基于纯 Go、Rust 或 C 的独立式可信小程序（Trusted Applet），以及任何能够在 ARM TrustZone 普通世界或 RISC-V S 模式下运行的操作系统，...

TEE-reversing

TEE 基础与概述 可信执行环境简介：ARM 的 TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html TEE 简介 原标题：TEEを中心とするCPUセキュリティ機能の動向 https://seminar-materials.iijlab.net/iijlab-seminar/iijlab-seminar-20181120.pdf 攻击 ARM 的 TrustZone...

GoTEE-example

引言 GoTEE 框架实现了基于 TamaGo 的 unikernel 在特权与非特权模式下的并发实例化，它们通过监视器模式和自定义系统调用相互交互。 凭借这些能力，GoTEE 实现了基于 TamaGo 的可信执行环境（TEE），将 Go 的内存安全性、便利性和能力引入到 ARM TrustZone 安全世界或 RISC-V Supervisor 执行环境中的裸机执行。 GoTEE 可以监督基于纯 Go、Rust 或 C 的独立式可信小程序（Trusted Applets）实现 GoTEE API，也可以监督任何能够在 ARM TrustZone 普通世界或 RISC-V S...

cachegrab

Cachegrab Cachegrab 是一款旨在帮助对支持 TrustZone 的 ARMv8 内核安全世界（secure world）中运行的软件执行并可视化跟踪驱动缓存攻击的工具。有关 Cachegrab 底层工作原理的概述，请参阅 Cachegrab 发布公告。 在 Android 上使用 Cachegrab 可以在 Android 设备上使用 Cachegrab。由于现代版本的 Android 不允许内核模块，因此应启用 CONFIGMODULES 和 CONFIGMODULEUNLOAD 内核选项，重新构建内核，并将其刷写到设备中。针对内核源码构建 Cachegrab...

PoC_CVE-2025-48507

Zynq UltraScale+ MPSoCにおけるTrustZoneの侵害 - CVE-2025-48507およびCVE-2025-0038の概念実証 非セキュアソフトウェアは、CVE-2025-48507およびCVE-2025-0038を悪用して、Zynq UltraScale+プラットフォーム 上のセキュアワールドへの読み取り/書き込みアクセスを取得し、TrustZoneの分離を破ることができます。そのために、非セキュアソフトウェアはCVE-2025-0038とCVE-2025-48507...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone カーネル権限昇格...

Linux Distros Unpatched Vulnerability : CVE-2026-41434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

Linux Distros Unpatched Vulnerability : CVE-2026-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

CVE-2026-53763

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the...

CVE-2026-41515

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses...

DEBIAN-CVE-2026-41514

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses...

EUVD-2026-41908

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver...

CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

UBUNTU-CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

EUVD-2026-41891

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one erro...

PT-2026-55976

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.20.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. A flaw in the subkey rollback...

PT-2026-55959

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.10.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. An unbounded recursion can cause the...

PT-2026-55975

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.3.0 through 4.10.x Description A resource leak exists in the shared memory cleanup logic of OP-TEE, a Trusted Execution Environment designed for Arm Cortex-A cores using TrustZone technology. The function cleanup shm refs in...

PT-2026-55972

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error paths...

PT-2026-55974

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error...