Beveiligingsadvies

CVE-2021-36133

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-07 20:42:31
Laatst bijgewerkt 2024-08-04 00:47:43
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral.