TEE-reversing

Fundamentos de TEE y conceptos generales Introducción al entorno de ejecución confiable: TrustZone de ARM https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html Introducción a TEE título original: TEEを中心とするCPUセキュリティ機能の動向...

GoTEE-example

Introducción El framework GoTEE implementa la instanciación concurrente de unikernels basados en TamaGo en modos privilegiado y no privilegiado, los cuales interactúan entre sí mediante el modo monitor y llamadas al sistema personalizadas. Con estas capacidades, GoTEE implementa un Entorno de...

cachegrab

Cachegrab Cachegrab es una herramienta diseñada para ayudar a realizar y visualizar ataques de caché basados en trazas contra software en el mundo seguro de los núcleos ARMv8 con TrustZone. Para obtener una descripción general de cómo funciona Cachegrab internamente, consulte el anuncio de...

PoC_CVE-2025-48507

Rompiendo TrustZone en Zynq UltraScale+ MPSoCs - Prueba de Concepto para CVE-2025-48507 y CVE-2025-0038 El Software No Seguro podría explotar CVE-2025-48507 y CVE-2025-0038 para obtener acceso de lectura/escritura al Mundo Seguro en plataformas Zynq UltraScale+ , rompiendo así el aislamiento de...

GoTEE

Introducción El framework GoTEE implementa la instanciación concurrente de unikernels basados en TamaGo en modos privilegiado y no privilegiado, que interactúan entre sí a través del modo monitor y llamadas al sistema personalizadas. Con estas capacidades GoTEE implementa Entornos de Ejecución de...

cve-2016-2431

cve-2016-2431 Escalada de privilegios del kernel TrustZone de Qualcomm...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

EUVD-2026-89172

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-102709

An improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware fails to verify these pointers before dereferencing them, leading to unintended...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-102709: Exposure of Sensitive Information to an Unauthorized Actor

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

PT-2026-102757

Name of the Vulnerable Software and Affected Versions Arm TrustZone-M affected versions not specified Description Improper validation of non-secure NS pointers in multiple non-secure callable NSC entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The...

Building the Truman Show: A TrustZone-Based Framework for Lightweight Out-Of-Band Kernel Security Monitoring

The increasing number of vulnerabilities in operating systems, together with sophisticated kernel-level threats e.g., rootkits, has weakened the effectiveness of traditional in-kernel protection mechanisms. Since these defenses operate at the same privilege level as the kernel, they share the sam...

MATEE: Efficiently Bridging the Semantic Gap in TrustZone Via Arm Pointer Authentication

Trusted Execution Environments TEEs employ hardware-based isolation mechanisms to safeguard the confidentiality and integrity of sensitive code and data. One such prevalent implementation is Arm TrustZone, which partitions the system into the secure and normal non-secure worlds. However, this...

Linux Distros Unpatched Vulnerability : CVE-2026-41434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

Linux Distros Unpatched Vulnerability : CVE-2026-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...

CVE-2026-53763

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the...

CVE-2026-41515

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses...