Description (CNA)
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TrustedFirmware / Trusted Firmware-M | affected 0 before 00d1b3e716dc636f7ad4398980ae55427dc1731d |
CWE
CWE-283
References
- https://www.trustedfirmware.org/projects/tf-m/
- https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/53051/1/docs/security/security_advisories/missing_ns_pointer_validation_mailbox_init.rst#58
ADP enrichment
No English description supplied.
No references supplied.