Skip to contentTrustedfirmware vulnerabilities
Newest
- trustedfirmware op-teeAn unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted...CVE-2022-475496.4 Medium
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap...CVE-2022-46393Fix available9.8 Critical
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access...CVE-2022-46392Fix available5.3 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functionCVE-2022-46152Public exploit8.2 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...CVE-2022-35409Fix available9.1 Critical
- trustedfirmware trusted firmware-mTrusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update...CVE-2021-436197.8 High
- trustedfirmware trusted firmware-mTrusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE...CVE-2021-403275.9 Medium
- trustedfirmware mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt...CVE-2021-45450Fix available7.5 High
- arm mbed tls, debian linux +1 moreMbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by...CVE-2021-44732Fix available9.8 Critical
- trustedfirmware op-teeAn issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu…CVE-2021-441497.8 High
- trustedfirmware op-teeThe OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/wri…CVE-2021-361337.1 High
- trustedfirmware op-teeIn Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call...CVE-2019-250529.1 Critical
- arm trusted firmware, trustedfirmware trusted firmware-m +1 moreIn Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of...CVE-2021-27562In KEV5.5 Medium
- trustedfirmware trusted firmware-mIn Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part...CVE-2021-320327.5 High
- trustedfirmware op-tee, westerndigital inand cl em132 firmware, inand ix em132 firmware +1 more +3 moreWestern Digital iNAND devices through 2020-06-03 allow Authentication Bypass via a capture-replay...CVE-2020-137996.8 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that...CVE-2020-10932Fix available4.7 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...CVE-2019-16910Fix available5.3 Medium
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This...CVE-2019-10102929.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory...CVE-2019-10102939.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially...CVE-2019-10102947.5 High
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory...CVE-2019-10102959.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code...CVE-2019-10102969.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution...CVE-2019-10102979.8 Critical
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code...CVE-2019-1010298Public exploit9.8 Critical
- trustedfirmware trusted firmware-aARM Trusted Firmware-A allows information disclosure.CVE-2018-19440Fix available5.3 Medium
- trustedfirmware trusted firmware-aIn all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving...CVE-2017-15031Fix available7.5 High
- arm mbed tlsArm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker...CVE-2018-19608Fix available4.7 Medium
- libtom libtomcrypt, trustedfirmware op-tee +1 moreUpdated libtomcrypt packages fix security vulnerabilityCVE-2018-12437Fix available4.9 Medium
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...CVE-2018-9989Fix available7.5 High
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...CVE-2018-9988Fix available7.5 High
- trustedfirmware trusted firmware-aThe BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write...CVE-2017-96077.0 High
- arm mbed tlsARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows...CVE-2017-14032Fix available8.1 High
- trustedfirmware trusted firmware-aIn ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows...CVE-2017-75647.5 High
- trustedfirmware trusted firmware-aIn ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing...CVE-2017-75638.1 High
- arm mbed tlsAn exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...CVE-2017-2784Fix available8.1 High
- libtom libtomcrypt, trustedfirmware op-tee +1 morelibtomcrypt - security updateCVE-2016-6129Fix available7.5 High
- polarssl, trustedfirmware mbed tls, debian linux +2 more +4 moreHeap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before...CVE-2015-80366.8 Medium
- polarssl, trustedfirmware mbed tls, debian linux +3 more +5 moreHeap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3...CVE-2015-5291Fix available6.8 Medium