OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, shdr_verify_signature can make a double free. shdr_verify_signature used to verify a TA binary before it is loaded. To verify a signature of it, allocate a memory for RSA key. RSA key allocate function (sw_crypto_acipher_alloc_rsa_public_key) will try to allocate a memory (which is optee’s heap memory). RSA key is consist of exponent and modulus (represent as variable e, n) and it allocation is not atomic way, so it may succeed in e but fail in n. In this case sw_crypto_acipher_alloc_rsa_public_keywill free oneand return as it is failed but variable ‘e’ is remained as already freed memory address .shdr_verify_signaturewill free again that memory (which ise`) even it is freed when it failed allocate RSA key. A patch is available in version 3.22. No known workarounds are available.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-415"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41325.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "3.20"
},
{
"fixed": "3.22"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "e2ec831cb07ed0099535c7c140cb6338aa62816a"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41325.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "19611497531985883910182324005570122572",
"length": 512
},
"id": "CVE-2023-41325-0d7e9726",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/dsa.c",
"function": "crypto_acipher_alloc_dsa_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "36330928165277711199422681799671281254",
"length": 290
},
"id": "CVE-2023-41325-12d8fd7d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/rsa.c",
"function": "do_alloc_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "179378040686409945345268282502473264319",
"length": 64
},
"id": "CVE-2023-41325-1caa8179",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/crypto/crypto.c",
"function": "crypto_bignum_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329250333843691881302537967333690236322",
"length": 95
},
"id": "CVE-2023-41325-248273fe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_rsa.c",
"function": "do_free_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "28619877592216406289997561809499008097",
"length": 585
},
"id": "CVE-2023-41325-260449c8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/dh.c",
"function": "crypto_acipher_alloc_dh_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"292916700181541312509860486136112692255",
"127171611277129919568178356795540637343",
"227397797974423168299339359535680017652",
"224905776435377583168456959648886926714"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-29ee4b3c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/include/crypto/crypto.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"36392772860490702619540987321803998729",
"263296080425511197988512490032550659697",
"39779655833258716960812897279464812561",
"7915495394878083213371089456449034540",
"182531015692732463118755271505601024810",
"72847780949899536695681623846004886526",
"337427337590493186398816267239603437327",
"167637690302206381794901598055668791130",
"282503815757531983531093295215732554409",
"297457024347691487104054393925318719733",
"3201054284028373511544748110828990024",
"1654996848701202390965554392715531700",
"211304088495790044991246414097402005755"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-2e440288",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/ecc.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "268283610465296590542943489598578638048",
"length": 680
},
"id": "CVE-2023-41325-3083a665",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_dh.c",
"function": "do_allocate_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "205160588715602486024563417354501027735",
"length": 512
},
"id": "CVE-2023-41325-31b8701b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/dh.c",
"function": "crypto_acipher_alloc_dh_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "201014192492749698797204255082364097090",
"length": 112
},
"id": "CVE-2023-41325-32672e6e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/rsa.c",
"function": "sw_crypto_acipher_free_rsa_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "231190227232382373770310208352351738776",
"length": 112
},
"id": "CVE-2023-41325-3294eb22",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/rsa.c",
"function": "do_free_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244958466722900442113004053565423009100",
"length": 512
},
"id": "CVE-2023-41325-32f4ca94",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_ecc.c",
"function": "do_allocate_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"330604730111021371713384782887321748016",
"131952939756760109648479903074431625924",
"69852597703591355068634802349099036714",
"266826602124299834129380545848033777201",
"233321168840956585005943858901176437658",
"101241076997500336885647284414346553396",
"281724097522161580342332509354259265630",
"326587099796524265362624498190096531641",
"251516039517354247180290111045673585196",
"113213195910661221759536791187010965766",
"104630238786809287284191299426898637402",
"299949129813165141890409038818036976810",
"320097350694502557374260034100856119609",
"309480815871268653003689611460244309912",
"136628016640813114432959258715098923349",
"213294412272040250566450425652574595197",
"221521519687324964288455565112195451005",
"155980115564352926431204885986670224482",
"55104281612823364774217193646260305421",
"171568352669527280276900183103405922551"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-3452ced0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/rsa.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "28421826829138910627861241999749601715",
"length": 501
},
"id": "CVE-2023-41325-373ea99e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/ecc.c",
"function": "do_alloc_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"164535495195002402865934249067254780148",
"88369505939796718829207428226886443288",
"196383985941362263975821147124463318080",
"94870878802708674724581917755174615580",
"243409180363241437684615704988787024663",
"230489017467217104346254278478774083322",
"92042931462021842841660450323758639446",
"164535495195002402865934249067254780148",
"88369505939796718829207428226886443288",
"196383985941362263975821147124463318080",
"208318191451094577886687536345167566146",
"286602921291868977815917244853316537052",
"31182737515898894923389297625871018113"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-397613fa",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/dsa.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"330604730111021371713384782887321748016",
"131952939756760109648479903074431625924",
"69852597703591355068634802349099036714",
"266826602124299834129380545848033777201",
"233321168840956585005943858901176437658",
"101241076997500336885647284414346553396",
"281724097522161580342332509354259265630",
"326587099796524265362624498190096531641",
"251516039517354247180290111045673585196",
"113213195910661221759536791187010965766",
"104630238786809287284191299426898637402",
"299949129813165141890409038818036976810",
"320097350694502557374260034100856119609",
"309480815871268653003689611460244309912",
"136628016640813114432959258715098923349",
"213294412272040250566450425652574595197",
"221521519687324964288455565112195451005",
"155980115564352926431204885986670224482",
"55104281612823364774217193646260305421",
"171568352669527280276900183103405922551"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-3a820883",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/rsa.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"253627503689814546473459534524001054388",
"269099179334528001477767609445234618986",
"94221648026277101509025687052718959652",
"156787014087450909082104611126550433526",
"146108261488191303876876544206111564093",
"285371568112679689235596770817376635506",
"267499619499539856659149670548233798434",
"216570960037923279439047133949356852323",
"211270504565641218832159453172926542619",
"124266244397057290171028593270111620149"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-411e28d2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/tee/tee_svc_cryp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"7064757885903900049674061559838786468",
"275685962109799656842567577741760298956",
"182275984054016043074365420911271970675",
"299709677939179674270692663811844606553",
"114283913876954674723141174787643839033",
"272431894595529207863518776052411985550",
"272298171854043734883465670459624059595"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-44dd90e9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_dh.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"321052217782085294385934341788459480723",
"161604658702724675429301695615400003438",
"307406736933447381995471753657992570293",
"129898272441689823324582413958502886806",
"120150622854381144002831008819666684433",
"334605449533713940437437686675446792357",
"150741629766749815266125354935167560487"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-45f07d07",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/mpi_desc.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281601631787401808569486470218438958476",
"length": 90
},
"id": "CVE-2023-41325-494fa684",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/bignum.c",
"function": "crypto_bignum_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281671719898525274487469665876222843973",
"length": 119
},
"id": "CVE-2023-41325-4a0a4af7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/ecc.c",
"function": "_ltc_ecc_free_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281601631787401808569486470218438958476",
"length": 90
},
"id": "CVE-2023-41325-4d31b44a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/mpi_desc.c",
"function": "crypto_bignum_free"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"164535495195002402865934249067254780148",
"88369505939796718829207428226886443288",
"39853236028052408618773437488733020814",
"101079592358331851702628272372257133625",
"57516167984474551227255681585619722131",
"185879651045980068014707575746564024929",
"2785205452923936733915715657620691709"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-4d3fd039",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/dh.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "241789924135648351164463907344875725859",
"length": 271
},
"id": "CVE-2023-41325-53b52c3f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/rsa.c",
"function": "sw_crypto_acipher_free_rsa_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209437019488241182323748251147711251911",
"length": 440
},
"id": "CVE-2023-41325-5487b443",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/dsa.c",
"function": "crypto_acipher_alloc_dsa_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "259275483844008052943714073117008125874",
"length": 1135
},
"id": "CVE-2023-41325-5a4a2bad",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/ecc.c",
"function": "crypto_asym_alloc_ecc_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "254294260176975217535117149380050829450",
"length": 767
},
"id": "CVE-2023-41325-617c6211",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/rsa.c",
"function": "do_alloc_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116665553784201954207077151984031326236",
"length": 2201
},
"id": "CVE-2023-41325-6a860b05",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/versal/ecc.c",
"function": "sign"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281671719898525274487469665876222843973",
"length": 119
},
"id": "CVE-2023-41325-74d4d01b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/ecc.c",
"function": "ecc_free_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "31047965950222098736714131471654141062",
"length": 103
},
"id": "CVE-2023-41325-77d456fc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/tee/tee_svc_cryp.c",
"function": "op_attr_bignum_free"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "108747913106954380753024247684500248126",
"length": 723
},
"id": "CVE-2023-41325-7c744167",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_dsa.c",
"function": "do_allocate_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"164535495195002402865934249067254780148",
"88369505939796718829207428226886443288",
"39853236028052408618773437488733020814",
"101079592358331851702628272372257133625",
"57516167984474551227255681585619722131",
"185879651045980068014707575746564024929",
"308755475934014443599817393098442741564"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-7f1182db",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/dh.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"266914121016204257564004883087992255480",
"122205708146620449064760649875676191136",
"326885957306498064839281794041072424746",
"9347313714794456447790838509373999937",
"310714610229233802815519184268224753051",
"273437908308317448640066549683743671357",
"31549111256118250924710976946441015821",
"152363935145026324812163842538289809003",
"100390289646156830790931785818551475472",
"338313579886729122622844114017046508581",
"154997953783960120847825328703797986779",
"213498422303349705666995104426377151459",
"260131320824937013696109095930129077730",
"36666353774825718656775649338059689685"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-803a8172",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_ecc.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "20405014221025246904036384778692738433",
"length": 296
},
"id": "CVE-2023-41325-808a30ee",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/rsa.c",
"function": "sw_crypto_acipher_alloc_rsa_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "17512955535420881900908163900198978302",
"length": 254
},
"id": "CVE-2023-41325-8fb81d95",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_rsa.c",
"function": "do_free_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"83451106534906497130694653688187397450",
"7036332294006366205015680692067940944",
"158760985422061261324069326281364977761",
"78870013312510609179134157285212853609",
"4535605793999941494762768726097917346",
"286873016878670237548541833579232749327",
"209880464224582415756201757708942180954",
"251013232946562025581377602347917243850",
"120827735975241150697744704385267407733",
"170684558096507112824274637087741234015",
"311799770531423083969945992941032006680",
"163549323626812482065113351509336097267",
"216919766238717331138910613231627342440",
"261385233106335684531455934920801964351",
"326244349472238670720991068895659451711",
"78052342653292846451377915206435937853",
"263799482485143689438700307920157463497",
"61164265076803568415718711514911009185",
"186653050580403321284741464368310888834",
"177289082982669638275419897056248052702",
"286640961922838461349506550749205475480"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-901914d5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_rsa.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "201014192492749698797204255082364097090",
"length": 112
},
"id": "CVE-2023-41325-95ef045a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/rsa.c",
"function": "sw_crypto_acipher_free_rsa_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "247468044473360959149471705180209368258",
"length": 424
},
"id": "CVE-2023-41325-96a17c8f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_ecc.c",
"function": "do_allocate_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "241789924135648351164463907344875725859",
"length": 271
},
"id": "CVE-2023-41325-a5dbe801",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/rsa.c",
"function": "sw_crypto_acipher_free_rsa_keypair"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "4863568545080367634782723716121865393",
"length": 1161
},
"id": "CVE-2023-41325-a86704f7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/ecc.c",
"function": "crypto_asym_alloc_ecc_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"52223612039249003119102435487446802587",
"217303783004760974947553449910779433553",
"56303607782795932265890881978036122471",
"92145790373975807034268248684606239775",
"41577786878725387659652253615309182659",
"310206240865343120457503153324010232544",
"59553051198443984473535422637428862424",
"206089105039324319193029300193018537796",
"91613846783523552559394761746321849841",
"41577786878725387659652253615309182659",
"216813398284677825635182917460983773942",
"36392772860490702619540987321803998729",
"263296080425511197988512490032550659697",
"39779655833258716960812897279464812561",
"54664593448719184793504355693677527929",
"236254389165376719550613776232466202224"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-ab9b4781",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/ecc.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "281671719898525274487469665876222843973",
"length": 119
},
"id": "CVE-2023-41325-b69c7275",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/ecc.c",
"function": "do_free_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120205684435181996245710458405978714074",
"length": 435
},
"id": "CVE-2023-41325-c184f3de",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/ecc.c",
"function": "do_alloc_publickey"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315728677329940241592124618834707042180",
"225697662201963806463913563937270304627",
"327639842396672235710185108544447459845",
"287757468617260063600224049840403085004",
"112203329380586643675386814211100089228",
"237801063141931659595007824472711823475",
"162273323967999564282185734077281789622",
"315728677329940241592124618834707042180",
"225697662201963806463913563937270304627",
"327639842396672235710185108544447459845",
"267126351579962327732362250150267315497",
"26484967786369206330754812231688188285",
"76194194772307030216897003318793985533"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-c96851e7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_dsa.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"321052217782085294385934341788459480723",
"161604658702724675429301695615400003438",
"307406736933447381995471753657992570293",
"129898272441689823324582413958502886806",
"120150622854381144002831008819666684433",
"334605449533713940437437686675446792357",
"150741629766749815266125354935167560487"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-cb522a29",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/bignum.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"54198085299802746144007030850330281384",
"329107290407549941567058260131004187768",
"255734240258523338548389814756176849933",
"138895424392638197378527763122019617271",
"207291057125245990446901791974193106482",
"162763554940923991928793127709725919468"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-cc9eecb5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/crypto/crypto.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "76620783214866409801574228673117637119",
"length": 6855
},
"id": "CVE-2023-41325-d5272726",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/tee/tee_svc_cryp.c",
"function": "syscall_cryp_derive_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "249635079901102884588491242854329062847",
"length": 95
},
"id": "CVE-2023-41325-d6c18fd6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_ecc.c",
"function": "do_free_publickey"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"36392772860490702619540987321803998729",
"263296080425511197988512490032550659697",
"39779655833258716960812897279464812561",
"5109341922004747524905066592737060500",
"287055441707160405288211426604796354063",
"52223612039249003119102435487446802587",
"217303783004760974947553449910779433553",
"210806191632747798221825771758188715190",
"282503815757531983531093295215732554409",
"152085133108630658556798773802057125651",
"59553051198443984473535422637428862424",
"63521135965613278704325510621057689649",
"211606375193412571733469251958378165059"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-e22bf35a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/ecc.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "67379563687902452822475070908997026396",
"length": 334
},
"id": "CVE-2023-41325-e55bbd88",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/rsa.c",
"function": "sw_crypto_acipher_alloc_rsa_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "29248692058239080478587921903752576777",
"length": 631
},
"id": "CVE-2023-41325-f2e7cffe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_dsa.c",
"function": "do_allocate_publickey"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "223191097601067927339561500218950774906",
"length": 1097
},
"id": "CVE-2023-41325-f40d1a99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "lib/libmbedtls/core/ecc.c",
"function": "crypto_asym_alloc_ecc_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "208923253091900512831076678267280146086",
"length": 493
},
"id": "CVE-2023-41325-f7999137",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/caam/acipher/caam_rsa.c",
"function": "do_allocate_publickey"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"330604730111021371713384782887321748016",
"122890404344968113353814851849140698919",
"119474483550483449402539512758817367541",
"320097350694502557374260034100856119609",
"309480815871268653003689611460244309912",
"136628016640813114432959258715098923349",
"213294412272040250566450425652574595197",
"221521519687324964288455565112195451005",
"116477182000339324341246564601317525559",
"168310680676147838418983225684243946752",
"73210734525224770163144095219333671389",
"277938807454117300760039294800688197178",
"317537898489641067702767097025182810563",
"280731677747454769250528373400471054121",
"130855385463034527915327210661793444239",
"263877385349350013679340943048140904740",
"247603202236752114316856304227175717575",
"190905828873266950660652795770884684908",
"189957604378088929647935254980148706811",
"141321672466796577173595053830332671695",
"236093281171310394430526721105959015003",
"254685323118658959016617591561986649140",
"112062630381125355081987063416872534767",
"320097350694502557374260034100856119609",
"309480815871268653003689611460244309912",
"136628016640813114432959258715098923349",
"213294412272040250566450425652574595197",
"221521519687324964288455565112195451005",
"155980115564352926431204885986670224482",
"274376074801724366009524845734764728132",
"126289944535171345888638465506627795032"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-f7da32e9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/rsa.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "311448794177251729134817978099616790672",
"length": 1090
},
"id": "CVE-2023-41325-f86ffb1f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/lib/libtomcrypt/ecc.c",
"function": "crypto_asym_alloc_ecc_public_key"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "274654233705928740000435221696270299080",
"length": 516
},
"id": "CVE-2023-41325-fbefd12e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/se050/core/rsa.c",
"function": "do_free_keypair"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"277379940893061789517647652190945682219",
"119427756997951124663467578296817186594",
"66826996688704630579787103535025111544",
"1358558174341848363674924278013900909",
"220068172066066104850912377797607142412",
"221219618902465746680803142483658870558"
],
"threshold": 0.9
},
"id": "CVE-2023-41325-fe221882",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/op-tee/optee_os/commit/e2ec831cb07ed0099535c7c140cb6338aa62816a",
"target": {
"file": "core/drivers/crypto/versal/ecc.c"
}
}
]
"2026-10-28T10:35:12Z"