CVE-2024-22004

The bug involves improper verification of data length (lack of adequate size checking — CWE-125, out-of-bounds read). An attacker with privileged access to an unsecured Linux operating system (so-called Normal World) can craft an appropriate request that exceeds the assumed buffer boundaries. This results in reading data from memory allocated to a Trusted Application running in a secure enclave (e.g., TrustZone), thereby bypassing the isolation between the unsecured and secured environment.

An attacker can gain access to sensitive data stored in a secure enclave (Trusted Application), which may lead to disclosure of cryptographic keys, credentials, or other sensitive information. In the context of the CVSS vector, complete compromise of system confidentiality, integrity, and availability is possible.

Patches available from the manufacturer should be applied according to the references (https://support.google.com/product-documentation/answer/14580222). Urgent firmware updates of all mentioned Google Nest Wifi devices to the version indicated by Google are recommended.

Google Nest Wifi Pro Firmware, Google Nest Wifi Pro, Google Nest Wifi Point Firmware, Google Nest Wifi Point, Google Nest Wifi Router Firmware — specific versions indicated in the manufacturer's references