Ti Omap l138 Firmware vulnerabilities

3 CVEs affecting Ti Omap l138 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-25334, published 2023-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-25334, published 2023-10-19. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A…
CVE-2022-25333, published 2023-10-19. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only…
CVE-2022-25332, published 2023-10-19. Medium severity, CVSS 4.1. EPSS: 0.1% chance of exploitation in the next 30 days. The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor…