CVE-2024-38532
TEST_KEY used in example dcp_tool reference implementation
Résumé
TEST_KEY used in example dcp_tool reference implementation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The NXP Data Co-Processor (DCP) is a built-in hardware module for specific NXP SoCs¹ that implements a dedicated AES cryptographic engine for encryption/decryption operations. The dcp_tool reference implementation included in the repository selected the test key, regardless of its -t argument. This issue has been patched in commit 26a7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com