Mailbox Pointer Validation Flaw in Trusted Firmware-M

Executive Summary

This vulnerability exists in Trusted Firmware-M (TF-M) versions 2 through 2.3.0. It involves improper handling of a pointer during mailbox initialization on PSOC64 and RP2350 platforms. A non-secure, unvalidated pointer is accepted, which could allow unauthorized access or manipulation of memory.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking TF-M versions and mailbox initialization behavior. Inspect TF-M logs for unexpected pointer handling during mailbox setup. Review system memory access patterns for unauthorized secure memory access attempts. No direct commands are provided in available resources.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker with local access and limited privileges to escalate their access level. It may lead to unauthorized code execution, data breaches, or system compromise on affected devices using TF-M versions 2 through 2.3.0.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows non-secure code to supply unvalidated pointers during mailbox initialization, potentially leading to unauthorized memory access or code execution. Such flaws could compromise data integrity and confidentiality, which are critical for compliance with GDPR (data protection) and HIPAA (healthcare data privacy). However, the provided CVE details do not explicitly address compliance impacts.

Useful 0 Not Useful 0

Mitigation Strategies

Update Trusted Firmware-M to version 2.3.0 or later to address the mailbox initialization issue. Ensure secure validation of pointers in PSOC64 and RP2350 platforms.

Useful 0 Not Useful 0