CVE-2022-25332mediumCWE-208

CVE-2022-25332: falha de média gravidade em Texas Instruments OMAP

SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar OMAP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.1%
The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managing cache contents and collecting timing information for different ciphertext inputs. Using this side channel, the SK_LOAD secure kernel routine can be used to recover the Customer Encryption Key (CEK).
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:L/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:N/MA:N
Produtos afetados
Texas Instruments · OMAP
CVEs relacionadas — Texas Instruments OMAP

No mesmo produto, das mais perigosas para as menos.

CVE-2022-25334HIGHStack overflow on SK_LOAD signature length field in Texas Instruments OMAP L138EPSS 0.2%CVE-2022-25333HIGHFlawed SK_LOAD module authenticity check in Texas Instruments OMAP L138EPSS 0.1%