CVE-2021-36133: Trustedfirmware Op-Tee

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral.

Affected products

• Trustedfirmware Op-Tee: affected versions not specified

Published 2021-12-07. Last modified 2026-06-17.