GoKawiilResearch roundup documents years of attacks breaking TEE security guarantees
A new analysis compiles a series of publicly documented attacks against trusted execution environments (TEEs) from Intel SGX and AMD SEV, including Foreshadow, SGAxe, ÆPIC Leak, BadRAM and WireTap.fail. These attacks range from software bugs in enclave code, like a memory-safety flaw in Signal's contact discovery enclave, to hardware-level exploits that let attackers forge or steal remote attestation keys, sometimes using physical access to memory chips.