Tag
The article reveals that OP-TEE's memory isolation on NXP i.MX 8M SoCs can be bypassed from the normal world due to missing TZASC configuration, allowing attackers with kernel access to read secure world memory. The fix is available in upstream OP-TEE v4.10.0+ with CFG_TZASC_REGION0_SECURE=y or downstream lf-6.12.49_2.2.0.