← Database

CVE-2022-47549

MEDIUM CVSS: 6.4 Published: 2022-12-19 Modified: 2026-06-17

Description

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to bypass signature verification and install malicious trusted applications via electromagnetic fault injections.

Affected Platforms

Trustedfirmware Op-Tee

Weakness Type

CWE-347, CWE-347

References