Description
In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information.
Unscored
CVE-2019-25052
EUVD-2019-11501GHSA-qx3f-hv27-2wg9
In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions dir…
Published Aug 11, 2021 · Updated Aug 5, 2024 · Assigned by mitre