Description
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/f-secure-foundry/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2021-0001-OP-TEE_TrustZone_bypass.txt
Scores
CVSS v3
7.1
EPSS
0.0006
EPSS Percentile
16.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-732
Status
published
Products (1)
linaro/op-tee
Published
Dec 07, 2021
Tracked Since
Feb 18, 2026