CVE-2023-28586

Summary

CVE-2023-28586 is a newly discovered information disclosure vulnerability affecting Trusted Execution Environment (TEE) in ELF (Executable and Linkable Format) files. This issue arises when the system accesses trusted application metadata symbol addresses while loading an ELF in TEE. As a result, sensitive information may be exposed, potentially leading to security breaches or unauthorized access. It is recommended that affected systems be updated as soon as possible to mitigate this risk. Users should also be cautious when opening untrusted ELF files to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.