Vulnerability Details CVE-2021-36133
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.6%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 3.6
Products affected by CVE-2021-36133
-
-
-
cpe:2.3:h:nxp:i.mx_6solox:-
-
cpe:2.3:h:nxp:i.mx_6ull:-
-
cpe:2.3:h:nxp:i.mx_6ulz:-
-
-
cpe:2.3:o:linaro:op-tee:-