| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 1 | ################### |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 2 | Security Advisories |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 3 | ################### |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 4 | |
| 5 | .. toctree:: |
| 6 | :maxdepth: 1 |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 7 | :hidden: |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 8 | |
| David Hu | 3fc5a0a | 2021-05-12 15:22:12 +0800 | [diff] [blame] | 9 | stack_seal_vulnerability |
| 10 | svc_caller_sp_fetching_vulnerability |
| 11 | crypto_multi_part_ops_abort_fail |
| David Hu | 46bb457 | 2021-11-18 21:24:12 +0800 | [diff] [blame] | 12 | profile_small_key_id_encoding_vulnerability |
| Sherry Zhang | 359583b | 2022-02-09 15:47:45 +0800 | [diff] [blame] | 13 | fwu_write_vulnerability |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 14 | |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 15 | +------------+-----------------------------------------------------------------+ |
| 16 | | ID | Title | |
| 17 | +============+=================================================================+ |
| 18 | | |TFMV-1| | NS world may cause the CPU to perform an unexpected return | |
| 19 | | | operation due to unsealed stacks. | |
| 20 | +------------+-----------------------------------------------------------------+ |
| 21 | | |TFMV-2| | Invoking Secure functions from handler mode may cause TF-M IPC | |
| 22 | | | model to behave unexpectedly. | |
| 23 | +------------+-----------------------------------------------------------------+ |
| 24 | | |TFMV-3| | ``abort()`` function may not take effect in TF-M Crypto | |
| 25 | | | multi-part MAC/hashing/cipher operations. | |
| 26 | +------------+-----------------------------------------------------------------+ |
| 27 | | |TFMV-4| | NSPE may access secure keys stored in TF-M Crypto service | |
| 28 | | | in Profile Small with Crypto key ID encoding disabled. | |
| 29 | +------------+-----------------------------------------------------------------+ |
| 30 | | |TFMV-5| | ``psa_fwu_write()`` may cause buffer overflow in SPE. | |
| 31 | +------------+-----------------------------------------------------------------+ |
| 32 | |
| 33 | .. |TFMV-1| replace:: :doc:`TFMV-1 <stack_seal_vulnerability>` |
| 34 | .. |TFMV-2| replace:: :doc:`TFMV-2 <svc_caller_sp_fetching_vulnerability>` |
| 35 | .. |TFMV-3| replace:: :doc:`TFMV-3 <crypto_multi_part_ops_abort_fail>` |
| 36 | .. |TFMV-4| replace:: :doc:`TFMV-4 <profile_small_key_id_encoding_vulnerability>` |
| 37 | .. |TFMV-5| replace:: :doc:`TFMV-5 <fwu_write_vulnerability>` |
| 38 | |
| Soby Mathew | 32e0058 | 2020-07-28 13:06:55 +0100 | [diff] [blame] | 39 | -------------- |
| 40 | |
| Anton Komlev | f7a4404 | 2023-01-26 14:50:22 +0000 | [diff] [blame] | 41 | *Copyright (c) 2020-2023, Arm Limited. All rights reserved.* |