CVE-2023-41325

Source
https://cve.org/CVERecord?id=CVE-2023-41325
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41325.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-41325
Aliases
  • GHSA-jrw7-63cq-7vhm
Published
2023-09-15T19:40:58Z
Modified
2026-10-28T10:35:12Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N CVSS Calculator
Summary
OP-TEE double free in shdr_verify_signature
Details

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdr_verify_signature can make a double free. shdr_verify_signature used to verify a TA binary before it is loaded. To verify a signature of it, allocate a memory for RSA key. RSA key allocate function (sw_crypto_acipher_alloc_rsa_public_key) will try to allocate a memory (which is optee’s heap memory). RSA key is consist of exponent and modulus (represent as variable e, n) and it allocation is not atomic way, so it may succeed in e but fail in n. In this case sw_crypto_acipher_alloc_rsa_public_keywill free oneand return as it is failed but variable ‘e’ is remained as already freed memory address .shdr_verify_signaturewill free again that memory (which ise`) even it is freed when it failed allocate RSA key. A patch is available in version 3.22. No known workarounds are available.

Database specific
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-415"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41325.json"
}
References

Affected packages

Git / github.com/op-tee/optee_os

Affected ranges

Type
GIT
Repo
https://github.com/op-tee/optee_os
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "3.20"
                },
                {
                    "fixed":  "3.22"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "fixed":  "e2ec831cb07ed0099535c7c140cb6338aa62816a"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

3.*
3.20.0
3.21.0
3.21.0-rc1
3.22.0-rc1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41325.json"
vanir_signatures
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "19611497531985883910182324005570122572",
            "length":  512
        },
        "id":  "CVE-2023-41325-0d7e9726",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/dsa.c",
            "function":  "crypto_acipher_alloc_dsa_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "36330928165277711199422681799671281254",
            "length":  290
        },
        "id":  "CVE-2023-41325-12d8fd7d",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/rsa.c",
            "function":  "do_alloc_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "179378040686409945345268282502473264319",
            "length":  64
        },
        "id":  "CVE-2023-41325-1caa8179",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/crypto/crypto.c",
            "function":  "crypto_bignum_free"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "329250333843691881302537967333690236322",
            "length":  95
        },
        "id":  "CVE-2023-41325-248273fe",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_rsa.c",
            "function":  "do_free_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "28619877592216406289997561809499008097",
            "length":  585
        },
        "id":  "CVE-2023-41325-260449c8",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/dh.c",
            "function":  "crypto_acipher_alloc_dh_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "292916700181541312509860486136112692255",
                "127171611277129919568178356795540637343",
                "227397797974423168299339359535680017652",
                "224905776435377583168456959648886926714"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-29ee4b3c",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/include/crypto/crypto.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "36392772860490702619540987321803998729",
                "263296080425511197988512490032550659697",
                "39779655833258716960812897279464812561",
                "7915495394878083213371089456449034540",
                "182531015692732463118755271505601024810",
                "72847780949899536695681623846004886526",
                "337427337590493186398816267239603437327",
                "167637690302206381794901598055668791130",
                "282503815757531983531093295215732554409",
                "297457024347691487104054393925318719733",
                "3201054284028373511544748110828990024",
                "1654996848701202390965554392715531700",
                "211304088495790044991246414097402005755"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-2e440288",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/ecc.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "268283610465296590542943489598578638048",
            "length":  680
        },
        "id":  "CVE-2023-41325-3083a665",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_dh.c",
            "function":  "do_allocate_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "205160588715602486024563417354501027735",
            "length":  512
        },
        "id":  "CVE-2023-41325-31b8701b",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/dh.c",
            "function":  "crypto_acipher_alloc_dh_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "201014192492749698797204255082364097090",
            "length":  112
        },
        "id":  "CVE-2023-41325-32672e6e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/rsa.c",
            "function":  "sw_crypto_acipher_free_rsa_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "231190227232382373770310208352351738776",
            "length":  112
        },
        "id":  "CVE-2023-41325-3294eb22",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/rsa.c",
            "function":  "do_free_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "244958466722900442113004053565423009100",
            "length":  512
        },
        "id":  "CVE-2023-41325-32f4ca94",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_ecc.c",
            "function":  "do_allocate_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "330604730111021371713384782887321748016",
                "131952939756760109648479903074431625924",
                "69852597703591355068634802349099036714",
                "266826602124299834129380545848033777201",
                "233321168840956585005943858901176437658",
                "101241076997500336885647284414346553396",
                "281724097522161580342332509354259265630",
                "326587099796524265362624498190096531641",
                "251516039517354247180290111045673585196",
                "113213195910661221759536791187010965766",
                "104630238786809287284191299426898637402",
                "299949129813165141890409038818036976810",
                "320097350694502557374260034100856119609",
                "309480815871268653003689611460244309912",
                "136628016640813114432959258715098923349",
                "213294412272040250566450425652574595197",
                "221521519687324964288455565112195451005",
                "155980115564352926431204885986670224482",
                "55104281612823364774217193646260305421",
                "171568352669527280276900183103405922551"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-3452ced0",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/rsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "28421826829138910627861241999749601715",
            "length":  501
        },
        "id":  "CVE-2023-41325-373ea99e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/ecc.c",
            "function":  "do_alloc_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "164535495195002402865934249067254780148",
                "88369505939796718829207428226886443288",
                "196383985941362263975821147124463318080",
                "94870878802708674724581917755174615580",
                "243409180363241437684615704988787024663",
                "230489017467217104346254278478774083322",
                "92042931462021842841660450323758639446",
                "164535495195002402865934249067254780148",
                "88369505939796718829207428226886443288",
                "196383985941362263975821147124463318080",
                "208318191451094577886687536345167566146",
                "286602921291868977815917244853316537052",
                "31182737515898894923389297625871018113"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-397613fa",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/dsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "330604730111021371713384782887321748016",
                "131952939756760109648479903074431625924",
                "69852597703591355068634802349099036714",
                "266826602124299834129380545848033777201",
                "233321168840956585005943858901176437658",
                "101241076997500336885647284414346553396",
                "281724097522161580342332509354259265630",
                "326587099796524265362624498190096531641",
                "251516039517354247180290111045673585196",
                "113213195910661221759536791187010965766",
                "104630238786809287284191299426898637402",
                "299949129813165141890409038818036976810",
                "320097350694502557374260034100856119609",
                "309480815871268653003689611460244309912",
                "136628016640813114432959258715098923349",
                "213294412272040250566450425652574595197",
                "221521519687324964288455565112195451005",
                "155980115564352926431204885986670224482",
                "55104281612823364774217193646260305421",
                "171568352669527280276900183103405922551"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-3a820883",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/rsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "253627503689814546473459534524001054388",
                "269099179334528001477767609445234618986",
                "94221648026277101509025687052718959652",
                "156787014087450909082104611126550433526",
                "146108261488191303876876544206111564093",
                "285371568112679689235596770817376635506",
                "267499619499539856659149670548233798434",
                "216570960037923279439047133949356852323",
                "211270504565641218832159453172926542619",
                "124266244397057290171028593270111620149"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-411e28d2",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/tee/tee_svc_cryp.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "7064757885903900049674061559838786468",
                "275685962109799656842567577741760298956",
                "182275984054016043074365420911271970675",
                "299709677939179674270692663811844606553",
                "114283913876954674723141174787643839033",
                "272431894595529207863518776052411985550",
                "272298171854043734883465670459624059595"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-44dd90e9",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_dh.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "321052217782085294385934341788459480723",
                "161604658702724675429301695615400003438",
                "307406736933447381995471753657992570293",
                "129898272441689823324582413958502886806",
                "120150622854381144002831008819666684433",
                "334605449533713940437437686675446792357",
                "150741629766749815266125354935167560487"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-45f07d07",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/mpi_desc.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "281601631787401808569486470218438958476",
            "length":  90
        },
        "id":  "CVE-2023-41325-494fa684",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/bignum.c",
            "function":  "crypto_bignum_free"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "281671719898525274487469665876222843973",
            "length":  119
        },
        "id":  "CVE-2023-41325-4a0a4af7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/ecc.c",
            "function":  "_ltc_ecc_free_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "281601631787401808569486470218438958476",
            "length":  90
        },
        "id":  "CVE-2023-41325-4d31b44a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/mpi_desc.c",
            "function":  "crypto_bignum_free"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "164535495195002402865934249067254780148",
                "88369505939796718829207428226886443288",
                "39853236028052408618773437488733020814",
                "101079592358331851702628272372257133625",
                "57516167984474551227255681585619722131",
                "185879651045980068014707575746564024929",
                "2785205452923936733915715657620691709"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-4d3fd039",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/dh.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "241789924135648351164463907344875725859",
            "length":  271
        },
        "id":  "CVE-2023-41325-53b52c3f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/rsa.c",
            "function":  "sw_crypto_acipher_free_rsa_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "209437019488241182323748251147711251911",
            "length":  440
        },
        "id":  "CVE-2023-41325-5487b443",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/dsa.c",
            "function":  "crypto_acipher_alloc_dsa_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "259275483844008052943714073117008125874",
            "length":  1135
        },
        "id":  "CVE-2023-41325-5a4a2bad",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/ecc.c",
            "function":  "crypto_asym_alloc_ecc_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "254294260176975217535117149380050829450",
            "length":  767
        },
        "id":  "CVE-2023-41325-617c6211",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/rsa.c",
            "function":  "do_alloc_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "116665553784201954207077151984031326236",
            "length":  2201
        },
        "id":  "CVE-2023-41325-6a860b05",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/versal/ecc.c",
            "function":  "sign"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "281671719898525274487469665876222843973",
            "length":  119
        },
        "id":  "CVE-2023-41325-74d4d01b",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/ecc.c",
            "function":  "ecc_free_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "31047965950222098736714131471654141062",
            "length":  103
        },
        "id":  "CVE-2023-41325-77d456fc",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/tee/tee_svc_cryp.c",
            "function":  "op_attr_bignum_free"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "108747913106954380753024247684500248126",
            "length":  723
        },
        "id":  "CVE-2023-41325-7c744167",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_dsa.c",
            "function":  "do_allocate_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "164535495195002402865934249067254780148",
                "88369505939796718829207428226886443288",
                "39853236028052408618773437488733020814",
                "101079592358331851702628272372257133625",
                "57516167984474551227255681585619722131",
                "185879651045980068014707575746564024929",
                "308755475934014443599817393098442741564"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-7f1182db",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/dh.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "266914121016204257564004883087992255480",
                "122205708146620449064760649875676191136",
                "326885957306498064839281794041072424746",
                "9347313714794456447790838509373999937",
                "310714610229233802815519184268224753051",
                "273437908308317448640066549683743671357",
                "31549111256118250924710976946441015821",
                "152363935145026324812163842538289809003",
                "100390289646156830790931785818551475472",
                "338313579886729122622844114017046508581",
                "154997953783960120847825328703797986779",
                "213498422303349705666995104426377151459",
                "260131320824937013696109095930129077730",
                "36666353774825718656775649338059689685"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-803a8172",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_ecc.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "20405014221025246904036384778692738433",
            "length":  296
        },
        "id":  "CVE-2023-41325-808a30ee",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/rsa.c",
            "function":  "sw_crypto_acipher_alloc_rsa_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "17512955535420881900908163900198978302",
            "length":  254
        },
        "id":  "CVE-2023-41325-8fb81d95",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_rsa.c",
            "function":  "do_free_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "83451106534906497130694653688187397450",
                "7036332294006366205015680692067940944",
                "158760985422061261324069326281364977761",
                "78870013312510609179134157285212853609",
                "4535605793999941494762768726097917346",
                "286873016878670237548541833579232749327",
                "209880464224582415756201757708942180954",
                "251013232946562025581377602347917243850",
                "120827735975241150697744704385267407733",
                "170684558096507112824274637087741234015",
                "311799770531423083969945992941032006680",
                "163549323626812482065113351509336097267",
                "216919766238717331138910613231627342440",
                "261385233106335684531455934920801964351",
                "326244349472238670720991068895659451711",
                "78052342653292846451377915206435937853",
                "263799482485143689438700307920157463497",
                "61164265076803568415718711514911009185",
                "186653050580403321284741464368310888834",
                "177289082982669638275419897056248052702",
                "286640961922838461349506550749205475480"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-901914d5",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_rsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "201014192492749698797204255082364097090",
            "length":  112
        },
        "id":  "CVE-2023-41325-95ef045a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/rsa.c",
            "function":  "sw_crypto_acipher_free_rsa_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "247468044473360959149471705180209368258",
            "length":  424
        },
        "id":  "CVE-2023-41325-96a17c8f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_ecc.c",
            "function":  "do_allocate_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "241789924135648351164463907344875725859",
            "length":  271
        },
        "id":  "CVE-2023-41325-a5dbe801",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/rsa.c",
            "function":  "sw_crypto_acipher_free_rsa_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "4863568545080367634782723716121865393",
            "length":  1161
        },
        "id":  "CVE-2023-41325-a86704f7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/ecc.c",
            "function":  "crypto_asym_alloc_ecc_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "52223612039249003119102435487446802587",
                "217303783004760974947553449910779433553",
                "56303607782795932265890881978036122471",
                "92145790373975807034268248684606239775",
                "41577786878725387659652253615309182659",
                "310206240865343120457503153324010232544",
                "59553051198443984473535422637428862424",
                "206089105039324319193029300193018537796",
                "91613846783523552559394761746321849841",
                "41577786878725387659652253615309182659",
                "216813398284677825635182917460983773942",
                "36392772860490702619540987321803998729",
                "263296080425511197988512490032550659697",
                "39779655833258716960812897279464812561",
                "54664593448719184793504355693677527929",
                "236254389165376719550613776232466202224"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-ab9b4781",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/ecc.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "281671719898525274487469665876222843973",
            "length":  119
        },
        "id":  "CVE-2023-41325-b69c7275",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/ecc.c",
            "function":  "do_free_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "120205684435181996245710458405978714074",
            "length":  435
        },
        "id":  "CVE-2023-41325-c184f3de",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/ecc.c",
            "function":  "do_alloc_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "315728677329940241592124618834707042180",
                "225697662201963806463913563937270304627",
                "327639842396672235710185108544447459845",
                "287757468617260063600224049840403085004",
                "112203329380586643675386814211100089228",
                "237801063141931659595007824472711823475",
                "162273323967999564282185734077281789622",
                "315728677329940241592124618834707042180",
                "225697662201963806463913563937270304627",
                "327639842396672235710185108544447459845",
                "267126351579962327732362250150267315497",
                "26484967786369206330754812231688188285",
                "76194194772307030216897003318793985533"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-c96851e7",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_dsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "321052217782085294385934341788459480723",
                "161604658702724675429301695615400003438",
                "307406736933447381995471753657992570293",
                "129898272441689823324582413958502886806",
                "120150622854381144002831008819666684433",
                "334605449533713940437437686675446792357",
                "150741629766749815266125354935167560487"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-cb522a29",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/bignum.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "54198085299802746144007030850330281384",
                "329107290407549941567058260131004187768",
                "255734240258523338548389814756176849933",
                "138895424392638197378527763122019617271",
                "207291057125245990446901791974193106482",
                "162763554940923991928793127709725919468"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-cc9eecb5",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/crypto/crypto.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "76620783214866409801574228673117637119",
            "length":  6855
        },
        "id":  "CVE-2023-41325-d5272726",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/tee/tee_svc_cryp.c",
            "function":  "syscall_cryp_derive_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "249635079901102884588491242854329062847",
            "length":  95
        },
        "id":  "CVE-2023-41325-d6c18fd6",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_ecc.c",
            "function":  "do_free_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "36392772860490702619540987321803998729",
                "263296080425511197988512490032550659697",
                "39779655833258716960812897279464812561",
                "5109341922004747524905066592737060500",
                "287055441707160405288211426604796354063",
                "52223612039249003119102435487446802587",
                "217303783004760974947553449910779433553",
                "210806191632747798221825771758188715190",
                "282503815757531983531093295215732554409",
                "152085133108630658556798773802057125651",
                "59553051198443984473535422637428862424",
                "63521135965613278704325510621057689649",
                "211606375193412571733469251958378165059"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-e22bf35a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/ecc.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "67379563687902452822475070908997026396",
            "length":  334
        },
        "id":  "CVE-2023-41325-e55bbd88",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/rsa.c",
            "function":  "sw_crypto_acipher_alloc_rsa_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "29248692058239080478587921903752576777",
            "length":  631
        },
        "id":  "CVE-2023-41325-f2e7cffe",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_dsa.c",
            "function":  "do_allocate_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "223191097601067927339561500218950774906",
            "length":  1097
        },
        "id":  "CVE-2023-41325-f40d1a99",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "lib/libmbedtls/core/ecc.c",
            "function":  "crypto_asym_alloc_ecc_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "208923253091900512831076678267280146086",
            "length":  493
        },
        "id":  "CVE-2023-41325-f7999137",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/caam/acipher/caam_rsa.c",
            "function":  "do_allocate_publickey"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "330604730111021371713384782887321748016",
                "122890404344968113353814851849140698919",
                "119474483550483449402539512758817367541",
                "320097350694502557374260034100856119609",
                "309480815871268653003689611460244309912",
                "136628016640813114432959258715098923349",
                "213294412272040250566450425652574595197",
                "221521519687324964288455565112195451005",
                "116477182000339324341246564601317525559",
                "168310680676147838418983225684243946752",
                "73210734525224770163144095219333671389",
                "277938807454117300760039294800688197178",
                "317537898489641067702767097025182810563",
                "280731677747454769250528373400471054121",
                "130855385463034527915327210661793444239",
                "263877385349350013679340943048140904740",
                "247603202236752114316856304227175717575",
                "190905828873266950660652795770884684908",
                "189957604378088929647935254980148706811",
                "141321672466796577173595053830332671695",
                "236093281171310394430526721105959015003",
                "254685323118658959016617591561986649140",
                "112062630381125355081987063416872534767",
                "320097350694502557374260034100856119609",
                "309480815871268653003689611460244309912",
                "136628016640813114432959258715098923349",
                "213294412272040250566450425652574595197",
                "221521519687324964288455565112195451005",
                "155980115564352926431204885986670224482",
                "274376074801724366009524845734764728132",
                "126289944535171345888638465506627795032"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-f7da32e9",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/rsa.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "311448794177251729134817978099616790672",
            "length":  1090
        },
        "id":  "CVE-2023-41325-f86ffb1f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/lib/libtomcrypt/ecc.c",
            "function":  "crypto_asym_alloc_ecc_public_key"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "274654233705928740000435221696270299080",
            "length":  516
        },
        "id":  "CVE-2023-41325-fbefd12e",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/se050/core/rsa.c",
            "function":  "do_free_keypair"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "277379940893061789517647652190945682219",
                "119427756997951124663467578296817186594",
                "66826996688704630579787103535025111544",
                "1358558174341848363674924278013900909",
                "220068172066066104850912377797607142412",
                "221219618902465746680803142483658870558"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-41325-fe221882",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
        "target":  {
            "file":  "core/drivers/crypto/versal/ecc.c"
        }
    }
]
vanir_signatures_modified
"2026-10-28T10:35:12Z"