Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

TrustedFirmware-M/trusted-firmware-m

              main @ 15aaff1
            

Fixes

CVEs

HIGH

Peak severity

75.0%

Coverage

Highlights

Memory Safety: 4 prior fixes. Scrutinize any change in this area.

lib/ext/cryptocell-312-runtime/codesafe/src/psa_driver_api/src/cc3xx_internal_chacha20_poly1305.c: most-fixed (2 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Failure: 2 historical fix(es) link lib/ext/cryptocell-312-runtime/codesafe/src/psa_driver_api/src/cc3xx_internal_chacha20_poly1305.c to Cryptographic Failure.

Memory Safety: 2 historical fix(es) link secure_fw/partitions/ns_agent_mailbox/tfm_spe_mailbox.c to Memory Safety.

Authorization Bypass: 1 historical fix(es) link secure_fw/services/crypto to Authorization Bypass.