<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: omap l138 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-25334: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on </title><link>https://patchthecve.com/cve/CVE-2022-25334.html</link><guid>https://patchthecve.com/cve/CVE-2022-25334.html</guid><pubDate>Wed, 17 Jun 2026 04:33:24 +0000</pubDate><description>HIGH 8.2: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stack overflow, affecting secure kernel data </description></item><item><title>CVE-2022-25333: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check im</title><link>https://patchthecve.com/cve/CVE-2022-25333.html</link><guid>https://patchthecve.com/cve/CVE-2022-25333.html</guid><pubDate>Wed, 17 Jun 2026 04:33:24 +0000</pubDate><description>HIGH 8.2: The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) performs an RSA check implemented in mask ROM when loading a module through the SK_LOAD routine. However, only the module header authenticity is validated. An adversary can re-use any correctly signed header and ap</description></item><item><title>CVE-2022-25332: The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from</title><link>https://patchthecve.com/cve/CVE-2022-25332.html</link><guid>https://patchthecve.com/cve/CVE-2022-25332.html</guid><pubDate>Wed, 17 Jun 2026 04:33:24 +0000</pubDate><description>MEDIUM 4.4: The AES implementation in the Texas Instruments OMAP L138 (secure variants), present in mask ROM, suffers from a timing side channel which can be exploited by an adversary with non-secure supervisor privileges by managing cache contents and collecting timing information for different ciphertext inpu</description></item></channel></rss>