{"metadata": {"vulnerability": "ghsa-q84w-p2g5-rxw9", "count": 9, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2022-02-18T17:18:33.457Z", "date_only": false, "value": "2022-02-18T17:18:33.457Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2022-25334", "record": "CVE-2022-25334", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-10-19T09:36:09.230Z", "date_only": false, "value": "2023-10-19T09:36:09.230Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2022-25334", "record": "CVE-2022-25334", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-10-19T10:15:09Z", "date_only": false, "value": "2023-10-19T10:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-19T12:30:23Z", "date_only": false, "value": "2023-10-19T12:30:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-28T00:57:29Z", "date_only": false, "value": "2023-11-28T00:57:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/624", "record": "GHSA-Q84W-P2G5-RXW9", "field": "creation_timestamp", "uuid": "65a0432f-485a-414f-b17b-9f76ca606b67", "content": "#ExploitObserverAlert\n\nGHSA-q84w-p2g5-rxw9\n\nDESCRIPTION: Exploit Observer has 3 entries related to GHSA-Q84W-P2G5-RXW9. The Texas Instruments OMAP L138 (secure variants) trusted execution environment (TEE) lacks a bounds check on the signature size field in the SK_LOAD module loading routine, present in mask ROM. A module with a sufficiently large signature field causes a stack overflow, affecting secure kernel data pages. This can be leveraged to obtain arbitrary code execution in secure supervisor context by overwriting a SHA256 function pointer in the secure kernel data area when loading a forged, unsigned SK_LOAD module encrypted with the CEK (obtainable through CVE-2022-25332). This constitutes a full break of the TEE security architecture.\n\nGHSS: 8.2", "url": "https://t.me/arpsyndicate/624"}, {"timestamp": "2024-04-04T08:47:28Z", "date_only": false, "value": "2024-04-04T08:47:28Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "modified"}, {"timestamp": "2024-07-15T00:27:54.327Z", "date_only": false, "value": "2024-07-15T00:27:54.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-25334 / NCSC-NL", "record": "CVE-2022-25334", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-03T04:36:06.873Z", "date_only": false, "value": "2024-08-03T04:36:06.873Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-25334", "record": "CVE-2022-25334", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-03T04:36:06.873Z", "date_only": false, "value": "2024-08-03T04:36:06.873Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2022-25334 / CVE", "record": "CVE-2022-25334", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}], "metrics": {"as_of": "2026-11-11T09:31:03.136Z", "anchors": {"origin": {"timestamp": "2023-10-19T12:30:23Z", "date_only": false, "value": "2023-10-19T12:30:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-10-19T12:30:23Z", "date_only": false, "value": "2023-10-19T12:30:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 96670840.136989, "hours": 26853.01114916361, "days": 1118.8754645484837, "min_seconds": 96670840.136989, "max_seconds": 96670840.136989, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-19T12:30:23Z", "date_only": false, "value": "2023-10-19T12:30:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-q84w-p2g5-rxw9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T09:31:03.136Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}