CyberRota Analysis
AI-GeneratedThe vulnerability affects OP-TEE OS versions up to 4.10.0, specifically in the Widevine pseudo-TA open_session handler, which can lead to a denial of service when the CFG_WIDEVINE_PTA feature is enabled. Attackers can exploit this flaw by opening a session directly on the Widevine PTA, resulting in a null pointer dereference that crashes the trusted execution environment. Organizations utilizing OP-TEE OS with Widevine support should prioritize addressing this vulnerability to maintain system stability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients to cause a denial of service when CFG_WIDEVINE_PTA is enabled. Attackers can open a session directly on the Widevine PTA to trigger an unconditional dereference of a NULL calling session pointer via is_user_ta_ctx(), faulting the TEE at S-EL1 and crashing the trusted execution environment.