1588 matches found
CVE-2017-8240
In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability...
Null pointer dereference
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM...
Code injection
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call...
Input validation
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot...
Integer overflow
In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality...
Null pointer dereference
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth...
CVE-2014-9960
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API...
CVE-2015-9022
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
CVE-2015-9024
In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications...
CVE-2016-10334
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...
CVE-2016-10332
In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications...
Race condition
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
Code injection
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated...