Improper Pointer Validation in TrustZone-M NSC Functions

Executive Summary

This vulnerability involves improper validation of non-secure pointers in TrustZone-M non-secure callable entry functions. An attacker in the non-secure world can provide pointers to secure memory, which the secure firmware then dereferences without checking if they point to non-secure memory. This allows unintended disclosure of secure memory contents, breaking TrustZone-M's isolation guarantees and potentially enabling memory disclosure or corruption attacks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to read sensitive secure memory contents, including cryptographic material. If exploited, it may lead to unauthorized access to confidential data, compromise of secure applications, or further attacks leveraging exposed secrets. The impact depends on the specific use of TrustZone-M in your system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance with GDPR, HIPAA, and other regulations requiring strong data protection and isolation. Unauthorized disclosure of secure memory contents may result in data breaches, leading to legal penalties, reputational damage, and loss of trust. Organizations must address this to maintain regulatory compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Update TrustZone-M firmware to a patched version that validates non-secure pointers in NSC entry functions. Review and restrict non-secure world access to secure memory regions. Implement runtime checks to ensure pointers from non-secure memory do not reference secure memory.

Useful 0 Not Useful 0