Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CWE-126, CWE-125