CVE-2021-36133

Name of the Vulnerable Software and Affected Versions: OPTEE-OS CSU driver for NXP i.MX SoC devices (affected versions not specified)

Description: The issue involves a lack of security access configuration in the OPTEE-OS CSU driver for several NXP i.MX SoC device models. This results in a TrustZone bypass, allowing the NonSecure World to perform arbitrary memory read and write operations on Secure World memory. The exploitation of this issue involves a DMA capable peripheral.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.