Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdei_interrupt_bind. The parameter is passed to a call to plat_ic_get_interrupt_type. It can be any arbitrary value passing checks in the function plat_ic_is_sgi. A compromised Normal World (Linux kernel) can enable a root-privileged attacker to issue arbitrary SMC calls. Using this primitive, he can control the content of registers x0 through x6, which are used to send parameters to TF-A. Out-of-bounds addresses can be read in the context of TF-A (EL3). Because the read value is never returned to non-secure memory or in registers, no leak is possible. An attacker can still crash TF-A, however.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linaro Trusted Firmware-A 安全漏洞
Vulnerability Description
Linaro Trusted Firmware-A是Linaro开源的一种可信固件。 Linaro Trusted Firmware-A 2.10 之前版本存在安全漏洞，该漏洞源于格式错误的 SDEI SMC 可能会导致内存读取越界。
CVSS Information
N/A
Vulnerability Type
N/A