In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.
- http://www.securityfocus.com/bid/98874
No PoCs found on GitHub currently.