Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

trustedfirmware-m/trusted-firmware-m

              main @ 1b702ac
            

205

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 23 prior fixes. Scrutinize any change in this area.

bl2/ext/mcuboot/bootutil/src/image_validate.c: most-fixed (7 issues). Treat as high-risk during review.

171 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authentication/Auth Bypass: Dominant class (32 fixes). Recurring root causes: missing client ID/partition ID validation, missing ownership checks on handles/keys, and signature/tag verification that always succeeds or only checks partial data.

Buffer Overflow / Memory Corruption: 40+ fixes. Missing size checks on caller-supplied output vectors, flash reads, TLV payloads, and crypto buffers (AEAD, cipher, GCM, asymmetric signature) before memcpy or write.

Privilege Escalation / Isolation Bypass: 28 fixes. Root causes: incorrect MPU/PPC/SPU configuration, missing register lock-down, FPU/stack context mishandling, and flawed boundary checks allowing unprivileged access to privileged memory.