838 matches found
CVE-2021-34387
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
CVE-2021-34387
CVE-2021-34387 affects NVIDIA Jetson Trusty TLK/Trusty on TrustZone. The vulnerability arises from access permission settings where the DRAM region reserved for TrustZone is identity-mapped by the TLK with read, write, and execute permissions, allowing write access to kernel code and data that sh...
PT-2021-20500
Name of the Vulnerable Software and Affected Versions: ARM TrustZone Technology affected versions not specified Description: The issue concerns access permission settings in the ARM TrustZone Technology, where a portion of the DRAM reserved for TrustZone is identity-mapped with read, write, and...
PT-2021-20502
Name of the Vulnerable Software and Affected Versions: NVIDIA Trusty affected versions not specified Description: The issue is related to an incorrect bounds check in the NVIDIA OTE protocol message parsing code, present in all Trusty TAs. This can allow a local user, through a malicious client, ...
CVE-2021-34387: Incorrect Default Permissions
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
NVIDIA TLK 访问控制错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. The NVIDIA TLK suffers from an Access Control Error vulnerability that stems from the fact that the ARM® TrustZone technology, on which Trusty is based, contains a vulnerability in the access...
CVE-2021-34389: Missing Release of Memory after Effective Lifetime
Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user through a malicious client to access memory from the heap in the TrustZone, which may lead to information disclosure...
CVE-2020-11256
Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11257
Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11258
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11259
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
Design/Logic Flaw
Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking...
Memory corruption
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
Memory corruption
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
Memory corruption
Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11259
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11259
CVE-2020-11259 concerns memory corruption due to lack of validation of pointer arguments passed to the TrustZone BSP in Snapdragon Wired Infrastructure and Networking. The root cause is missing validation in the TrustZone BSP, enabling a local attacker with low complexity and no authentication to...
CVE-2020-11258
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...
CVE-2020-11258
CVE-2020-11258 concerns memory corruption caused by lack of validation of pointer arguments passed to the TrustZone BSP in Snapdragon Wired Infrastructure and Networking. Connected sources reference this CVE and reiterate the same issue; no explicit exploit details or remediation/version informat...