GoTEE

소개 GoTEE 프레임워크는 TamaGo 기반 유니커널을 권한privileged 및 비권한unprivileged 모드로 동시에 인스턴스화하며, 각 유니커널은 모니터 모드와 커스텀 시스템 콜을 통해 서로 상호작용합니다. 이러한 기능을 통해 GoTEE는 TamaGo 기반 TEETrusted Execution Environment를 구현하여, ARM TrustZone Secure World 또는 RISC-V Supervisor Execution Environment 내 베어 메탈 실행에 Go의 메모리 안전성, 편의성 및 기능을...

TEE-reversing

TEE 기초 및 일반 TEETrusted Execution Environment 소개: ARM의 TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html TEE 소개 원제: TEEを中心とするCPUセキュリティ機能の動向 https://seminar-materials.iijlab.net/iijlab-seminar/iijlab-seminar-20181120.pdf ARM TrustZone 공격...

GoTEE-example

소개 GoTEE 프레임워크는 권한privileged 및 비권한unprivileged 모드에서 TamaGo 기반 유니커널의 동시 인스턴스화를 구현하며, 유니커널들은 모니터 모드와 사용자 정의 시스템 콜을 통해 서로 상호 작용합니다. 이러한 기능을 통해 GoTEE는 TamaGo 기반 TEETrusted Execution Environment를 구현하여, ARM TrustZone Secure World 또는 RISC-V Supervisor Execution Environment 내부의 베어 메탈 실행에 Go의 메모리 안전성, 편의성...

cachegrab

Cachegrab Cachegrab은 TrustZone 지원 ARMv8 코어의 보안 월드에서 소프트웨어에 대한 트레이스 기반 캐시 공격을 수행하고 시각화하는 데 도움을 주도록 설계된 도구입니다. Cachegrab이 내부적으로 어떻게 작동하는지에 대한 개요는 Cachegrab 릴리스 발표를 참조하십시오. Android에서 Cachegrab 사용하기 Android 기기에서 Cachegrab을 사용할 수 있습니다. 최신 버전의 Android에서는 커널 모듈을 허용하지 않으므로 CONFIGMODULES 및...

PoC_CVE-2025-48507

Zynq UltraScale+ MPSoCにおけるTrustZoneの侵害 - CVE-2025-48507およびCVE-2025-0038の概念実証 非セキュアソフトウェアは、CVE-2025-48507およびCVE-2025-0038を悪用して、Zynq UltraScale+プラットフォーム 上のセキュアワールドへの読み取り/書き込みアクセスを取得し、TrustZoneの分離を破ることができます。そのために、非セキュアソフトウェアはCVE-2025-0038とCVE-2025-48507...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone 커널 권한 상승...

Linux Distros Unpatched Vulnerability : CVE-2026-41434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

Linux Distros Unpatched Vulnerability : CVE-2026-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

CVE-2026-53763

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the...

CVE-2026-41515

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses...

DEBIAN-CVE-2026-41514

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses...

EUVD-2026-41908

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver...

CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

UBUNTU-CVE-2026-41434

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS11 TA. Version 4.11.0 contains a patch. ...

EUVD-2026-41891

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one erro...

PT-2026-55976

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.20.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. A flaw in the subkey rollback...

PT-2026-55959

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.10.0 through 4.10.x Description OP-TEE is a Trusted Execution Environment TEE designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. An unbounded recursion can cause the...

PT-2026-55975

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.3.0 through 4.10.x Description A resource leak exists in the shared memory cleanup logic of OP-TEE, a Trusted Execution Environment designed for Arm Cortex-A cores using TrustZone technology. The function cleanup shm refs in...

PT-2026-55972

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error paths...

PT-2026-55974

Name of the Vulnerable Software and Affected Versions OP-TEE versions 4.5.0 through 4.10.x Description The RSA PKCS1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time memcmp function for label hash verification and contains multiple distinguishable error...