| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 1 | ################### |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 2 | Security Advisories |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 3 | ################### |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 4 | |
| 5 | .. toctree:: |
| 6 | :maxdepth: 1 |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 7 | :hidden: |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 8 | |
| David Hu | 3fc5a0a | 2021-05-12 15:22:12 +0800 | [diff] [blame] | 9 | stack_seal_vulnerability |
| 10 | svc_caller_sp_fetching_vulnerability |
| 11 | crypto_multi_part_ops_abort_fail |
| David Hu | 46bb457 | 2021-11-18 21:24:12 +0800 | [diff] [blame] | 12 | profile_small_key_id_encoding_vulnerability |
| Sherry Zhang | 359583b | 2022-02-09 15:47:45 +0800 | [diff] [blame] | 13 | fwu_write_vulnerability |
| Antonio de Angelis | 62bf52b | 2023-08-17 14:09:25 +0100 | [diff] [blame^] | 14 | cc3xx_partial_tag_compare_on_chacha20_poly1305 |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 15 | |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 16 | +------------+-----------------------------------------------------------------+ |
| 17 | | ID | Title | |
| 18 | +============+=================================================================+ |
| 19 | | |TFMV-1| | NS world may cause the CPU to perform an unexpected return | |
| 20 | | | operation due to unsealed stacks. | |
| 21 | +------------+-----------------------------------------------------------------+ |
| 22 | | |TFMV-2| | Invoking Secure functions from handler mode may cause TF-M IPC | |
| 23 | | | model to behave unexpectedly. | |
| 24 | +------------+-----------------------------------------------------------------+ |
| 25 | | |TFMV-3| | ``abort()`` function may not take effect in TF-M Crypto | |
| 26 | | | multi-part MAC/hashing/cipher operations. | |
| 27 | +------------+-----------------------------------------------------------------+ |
| 28 | | |TFMV-4| | NSPE may access secure keys stored in TF-M Crypto service | |
| 29 | | | in Profile Small with Crypto key ID encoding disabled. | |
| 30 | +------------+-----------------------------------------------------------------+ |
| 31 | | |TFMV-5| | ``psa_fwu_write()`` may cause buffer overflow in SPE. | |
| 32 | +------------+-----------------------------------------------------------------+ |
| Antonio de Angelis | 62bf52b | 2023-08-17 14:09:25 +0100 | [diff] [blame^] | 33 | | |TFMV-6| | Partial tag comparison when using Chacha20-Poly1305 on the PSA | |
| 34 | | | driver API interface in CryptoCell enabled platforms | |
| 35 | +------------+-----------------------------------------------------------------+ |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 36 | |
| 37 | .. |TFMV-1| replace:: :doc:`TFMV-1 <stack_seal_vulnerability>` |
| 38 | .. |TFMV-2| replace:: :doc:`TFMV-2 <svc_caller_sp_fetching_vulnerability>` |
| 39 | .. |TFMV-3| replace:: :doc:`TFMV-3 <crypto_multi_part_ops_abort_fail>` |
| 40 | .. |TFMV-4| replace:: :doc:`TFMV-4 <profile_small_key_id_encoding_vulnerability>` |
| 41 | .. |TFMV-5| replace:: :doc:`TFMV-5 <fwu_write_vulnerability>` |
| Antonio de Angelis | 62bf52b | 2023-08-17 14:09:25 +0100 | [diff] [blame^] | 42 | .. |TFMV-6| replace:: :doc:`TFMV-6 <cc3xx_partial_tag_compare_on_chacha20_poly1305>` |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 43 | |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 44 | -------------- |
| 45 | |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 46 | *Copyright (c) 2020-2023, Arm Limited. All rights reserved.* |