Researchers Find Bug in Qualcomm Code for Trusted App

guest · Nov 14, 2019

Researchers Find Bug in Qualcomm Code for Trusted App
November 14, 2019
https://www.bleepingcomputer.com/ne...rs-find-bug-in-qualcomm-code-for-trusted-app/

Researchers stressing the code related to Qualcomm's implementation of the secure execution area on mobile devices found a new vulnerability that could allow access to critical data.

Top smartphone brands like Samsung, LG, or Motorola rely on Qualcomm's implementation of the Trusted Execution Environment (TEE) based on the TrustZone technology from ARM to store and handle sensitive information in a secure area inside the main processor.
Not exactly a low-hanging fruit
Due to the tight control and restrictions available, access to data in Qualcomm’s “Secure World” is deemed extremely difficult. However, security researchers from Check Point figured out a way to do it.

After four months of investigating, they managed to execute a trustlet in the "normal world," and loaded in the "secure world" a modified variant they needed to communicate to.
With this setup, the researchers were able to start fuzzing the trustlet in search of exploitable vulnerabilities.
Click to expand...

Check Point: The Road to Qualcomm TrustZone Apps Fuzzing

Log in or Sign up

Researchers Find Bug in Qualcomm Code for Trusted App

guest Guest

Log in or Sign up

Researchers Find Bug in Qualcomm Code for Trusted App

guest Guest

Useful Searches