Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-47549

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to bypass signature verification and install malicious trusted applications via electromagnetic fault injections.

CVE
#pdf

%PDF-1.5 %���� 595 0 obj << /Linearized 1 /L 1347555 /H [ 2827 655 ] /O 599 /E 132222 /N 33 /T 1343713 >> endobj 596 0 obj << /Type /XRef /Length 126 /Filter /FlateDecode /DecodeParms << /Columns 5 /Predictor 12 >> /W [ 1 3 1 ] /Index [ 595 308 ] /Info 123 0 R /Root 597 0 R /Size 903 /Prev 1343714 /ID [<74f6c007869f7607899eff177962a8df><627f210cb368e230a9c7f10ffb1b364c>] >> stream x�cbd`�g`b``8 "�6�H�F��f�H�� R�D���FW@$��4�,� �Y��B�N�@�1��6���l����mۻ����?�2� G�Q��$�܁w�(9�I��Q��$��- endstream endobj 597 0 obj << /Names 902 0 R /OpenAction 795 0 R /Outlines 721 0 R /PageMode /UseOutlines /Pages 720 0 R /Type /Catalog >> endobj 598 0 obj << /Filter /FlateDecode /S 560 /O 685 /Length 567 >> stream x�c```b`��f`e``� �`6+�ɲ��H����A�A��I�����b� �� ���%4�E�=P���`�(Ǩ�"r�E�I[�[��N��I�U���H/c�-���`i���p�A~���e�=)o�n� NYu����� � B�yL^,�U"�u�ch�������끇y�J����X6�%�h)o�ω[m�A��� 3�,/��==ѝ��E�]��ٺ�l"�}�$��e^X(����(k���Q�0�h�r�;p�RܮI�D"’ٲ����N�:� ȈkS~:�%sӕ��u@�E���"<ӝ��_I�#�2��y���H˪���Yo\��f�l����)@��$��6kͶ7��KeL��e^\u��Ѳ)7��R�]��� ��7 c+�G�L��6�7��v�ɉ[��vJ;P9�� �AH�H��X�����A��7�k�t�7�3�e��� ��aa�.���Z�>PojJ:����?J^�nBG&�[+4|�YN*����� ����޴�U��D��l���6L+Y���R%S6�/@3��o,��� endstream endobj 599 0 obj << /Contents 600 0 R /MediaBox [ 0 0 612 792 ] /Parent 638 0 R /Resources 800 0 R /Type /Page >> endobj 600 0 obj << /Filter /FlateDecode /Length 2146 >> stream x��X[w�~���#ݳd���$�=n�I[{�s��!�5/ @����~3J���E 3��CI� ���U��o��y�ց��Ty� TY�E��Rq֤�c�~k�~���u�%i�����^��2�l� �sS��ne�~o�~��㟃([���F����C�����h�^���N�n/�o����������`��]�ú�c�RTRŕj��J�|�t��zl�.�t1.� tE��ţ"�����:�׋�� �#mp�{@V�Ѽ ���E’�".� �����O��gi\�e��݌�}ң��n���~���`���� ”���Ci���� O�q �L����1��y?t�y�ѿ+9-�2��6�St��5����B��.;8Z����1i�������}�uܔ%%ܩ����Ry��<�����;� Χ��T(�*e*�*o�;�|^ �:’b���I������’J���qyx�� ��’;�� 3N:5�י�b�E���R���ĺ��Ȩ(-KdO��’���4 ��3Ҙ��<� x�5�M���oo ���Л����Y��*d�D6m�r��,�S���sI��^;�H)U��;����4�_��;�M��U�O�%����6ݴ8O�L��\���;��"n�6$��$E†��’{b� ��J���A�t]˖V�Xt�H�jQ��4��F���h�X�렻�6��#�WBo��y�s�)��6���H ���F��{/W�����mu�p��"������z�JH �f�(�M�*�q#�>_E�]�y����_Ro��ng��.�p0��=��ش@��,2�` �+���a���E�4>32���N��+�B3đ��GSH�d�Cg/��}y����†��H��’�k�����F�Hd5����{��|��: 6�,��7�{VP7_�)����&]%4�Wyϝ,v�2��N�VN���2p{�5 � ����>����鞃�@��x���ߩ�%Q�����Ф�L���}��yh�|��X/�,p7�*p������Qo������D�4��!���}��d70��X�S� 2Zp-���$Y ���ZJ�m$��u��+���m�}����xy*[  �c��R��h�k+��X�0��ܚ|�!!����kQ-��.�{M�k4tm�A��T�����vs��Mq���8l���.�*u��^�@�����TѺ�V���!A0��ڽJҸ��c6wn?�C��yU��Qgѽ�"�:9��G�:

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda