TI-2023-21113 Aliases CVE-2023-40271 GHSA-7xgq-m8hq-839w

In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell…

LOW 39CWE-697Published 2023-09-08 · Updated 2024-09-26

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00386 32nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.6.0:::::::*	1.6.0	Vulnerable	OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.6.1:::::::*	1.6.1	Vulnerable	OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.7.0:::::::*	1.7.0	Vulnerable	OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.8.0:::::::*	1.8.0	Vulnerable	OP-TEE

cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·OP-TEE
cpe:2.3:o:trustedfirmware:trusted_firmware-m:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·OP-TEE

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-40271
2026-10-03 Alias added: GHSA-7xgq-m8hq-839w

References

Exploit 1

https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/cc3xx_partial_tag_compare_on_chacha20_poly1305.rst

Other 1

https://tf-m-user-guide.trustedfirmware.org/releases/index.html

TI-2021-09019 In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an… KEVCVSS 3.1MEDIUM 5.5
TI-2021-12009 In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part… CVSS 3.1HIGH 7.5
TI-2021-19487 Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update… CVSS 3.1HIGH 7.8
TI-2021-17401 Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. CVSS 3.1MEDIUM 5.9
TI-2023-28354 An issue was discovered in Trusted Firmware-M through 2.0.0. CVSS 3.1MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences