The issue is related to an unprotected memory-access operation in optee os, allowing a physically proximate adversary to bypass signature verification. This can lead to the installation of malicious trusted applications via electromagnetic fault injections.