CVE-2022-47549

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to bypass signature verification and install malicious trusted applications via electromagnetic fault injections.

• CWE-347
• CWE-347

• https://github.com/OP-TEE/optee_os/security/advisories/GHSA-r64m-h886-hw6gThird Party Advisory
• https://people.linaro.org/~joakim.bech/reports/Breaking_cross-world_isolation_on_ARM_TrustZone_through_EM_faults_coredumps_and_UUID_confusion.pdfExploit, Technical Description, Vendor Advisory
• https://github.com/OP-TEE/optee_os/security/advisories/GHSA-r64m-h886-hw6gThird Party Advisory
• https://people.linaro.org/~joakim.bech/reports/Breaking_cross-world_isolation_on_ARM_TrustZone_through_EM_faults_coredumps_and_UUID_confusion.pdfExploit, Technical Description, Vendor Advisory

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47532FileRun 20220519 allows SQL Injection via the "dir" paramete…9.8
• CVE-2022-4754The Easy Social Box / Page Plugin WordPress plugin through 4…5.4
• CVE-2022-47542Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect A…8.8
• CVE-2022-47543An issue was discovered in Siren Investigate before 12.1.7. …5.3
• CVE-2022-47544An issue was discovered in Siren Investigate before 12.1.7. …9.8
• CVE-2022-47547GossipSub 1.1, as used for Ethereum 2.0, allows a peer to ma…5.3
• CVE-2022-4755A vulnerability was found in FlatPress and classified as pro…6.1
• CVE-2022-47551Apiman 1.5.7 through 2.2.3.Final has insufficient checks for…6.5
• CVE-2022-47553Incorrect authorisation in ekorCCP and ekorRCI, which could …7.5
• CVE-2022-47554Exposure of sensitive information in ekorCCP and ekorRCI, po…7.5
• CVE-2022-47555Operating system command injection in ekorCCP and ekorRCI, w…8.8
• CVE-2022-47556Uncontrolled resource consumption in ekorRCI, allowing an at…6.5