🚨 CVE-2026-82927
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e.
🎖@cveNotify
GitHub
fix(tee): validate non-secure pointers at the secure-world boundary (#249) by bmolodan · Pull Request #250 · Samsung/mTower
Description
Fixes a HIGH/CRITICAL break of the TrustZone-M isolation guarantee: a
non-secure caller can make the secure world read from and write to secure
memory on its behalf, through the live cm...
September 1, 2026 55 1
