google / nest_wifi_pro_firmware CVEs

U-Boot environment is read from unauthenticated partition.

Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application

Google Nest WiFi Pro root code-execution & user-data compromise