NVIDIA SHIELD Experience Code Issue Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. A code issue vulnerability exists in NVIDIA SHIELD Experience, which exists due to a NULL pointer dereference error in TrustZone. An attacker could exploit this vulnerability to conduct a denial of service DoS attack...

NVIDIA Shield TV 代码问题漏洞

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. A code issue vulnerability exists in NVIDIA SHIELD Experience, which exists due to a NULL pointer dereference error in TrustZone. An attacker could exploit this vulnerability to conduct a denial of service DoS attack...

Samsung SMR 缓冲区错误漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. Samsung SMR suffers from a buffer error vulnerability that stems from a lack of input validation prior to TIMA trustlet memory copying, allowing an attacker to...

CVE-2021-30278

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1894

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

Input validation

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

Improper access control

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30278

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30278

CVE-2021-30278 is a Qualcomm/Qualcomm TrustZone vulnerability involving an input validation error in the TrustZone memory transfer interface that can lead to information disclosure across Qualcomm/ Snapdragon devices. The NVD entry notes a Mixed impact: CVSS v3.1 base score 5.5 (LOCAL, LOW comple...

CVE-2021-1894

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1894

CVE-2021-1894 affects Qualcomm closed‑source components in Snapdragon family (Auto/Compute/Connectivity/IoT lines, etc.). The issue stems from improper error handling while processing the signing key in TrustZone, leading to improper access control. The vulnerability is Local with Low privileges ...

Exploit for Race Condition in Linux Linux_Kernel

CVE-2021-44733: Fuzzing and exploitation of a use-after-free i...

Unspecified Vulnerability in Trusted Firmware M

ARM Trusted Firmware M TFM is an open source software from ARM UK. Provides a set of highly configurable software components to create a trusted execution environment. A security vulnerability exists in Trusted Firmware OP-TEE Trusted OS prior to version 3.15.0, which stems from the lack of secur...

NXP i.MX SoC has unspecified vulnerabilities

NXP i.MX SoC is nxp's multi-core solution for multimedia and display applications with scalable, secure and reliable high-performance and low-power features. nXP i.MX SoC devices have a security vulnerability that stems from the OPTEE-OS CSU driver for NXP i.MX SoC devices lacking secure access...

CVE-2021-44149

An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write...

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

CVE-2021-44149

An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write...

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

DEBIAN-CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...