syscall_authenc_init() does not check that the given nonce address is within TA accessible memory.

Patches

optee_os.git

• core: syscall_authenc_init(): check nonce accessibility (06aa9a9)

Workarounds

N/A

References

N/A

OP-TEE ID

OP-TEE-2019-0008

Reported by

Netflix (Bastien Simondi)

For more information

For more information regarding the security incident process in OP-TEE, please read the information that can be found when going to the "Security" page at https://www.trustedfirmware.org.