Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NXP i.MX SoC安全漏洞
Vulnerability Description
NXP i.MX SoC是nxp的适用于多媒体和显示应用的多核解决方案,具有可扩展、安全可靠的高性能和低功耗功能。 NXP i.MX SoC设备存在安全漏洞,该漏洞源于NXP i.MX SoC设备的OPTEE-OS CSU驱动缺乏几个型号的安全访问配置,导致了TrustZone绕过,因为NonSecure World可以在Secure World内存上执行任意内存读写操作。这涉及到一个支持DMA的外围设备。
CVSS Information
N/A
Vulnerability Type
N/A