index.rst

Security Advisories

stack_seal_vulnerability svc_caller_sp_fetching_vulnerability crypto_multi_part_ops_abort_fail profile_small_key_id_encoding_vulnerability fwu_write_vulnerability cc3xx_partial_tag_compare_on_chacha20_poly1305 debug_log_vulnerability

ID	Title
TFMV-1 <stack_seal_vulnerability>	NS world may cause the CPU to perform an unexpected return operation due to unsealed stacks.
TFMV-2 <svc_caller_sp_fetching_vulnerability>	Invoking Secure functions from handler mode may cause TF-M IPC model to behave unexpectedly.
TFMV-3 <crypto_multi_part_ops_abort_fail>	abort() function may not take effect in TF-M Crypto multi-part MAC/hashing/cipher operations.
TFMV-4 <profile_small_key_id_encoding_vulnerability>	NSPE may access secure keys stored in TF-M Crypto service in Profile Small with Crypto key ID encoding disabled.
TFMV-5 <fwu_write_vulnerability>	psa_fwu_write() may cause buffer overflow in SPE.
TFMV-6 <cc3xx_partial_tag_compare_on_chacha20_poly1305>	Partial tag comparison when using Chacha20-Poly1305 on the PSA driver API interface in CryptoCell enabled platforms
TFMV-7 <debug_log_vulnerability>	ARoT can access PRoT data via debug logging functionality

---

Copyright (c) 2020-2023, Arm Limited. All rights reserved.