Lucene search
+L

563 matches found

BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.5 views

The vulnerability of the API interface of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the API interface of the Qualcomm Trusted Execution Environment component in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

10CVSS5.5AI score0.01252EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.7 views

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to bypass debug policy restrictions and compromise the confidentiality, integrity, and accessibility o...

10CVSS5.5AI score0.01262EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/07/05 12:0 a.m.9 views

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS5.5AI score0.01252EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/06/14 12:0 a.m.7 views

Google Android Qualcomm QTEECOM Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm QTEECOM driver The Qualcomm QTEECOM driver is one of the Secure Execution Environment Communicator drivers. A...

7CVSS7AI score0.00119EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.8 views

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01252EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.5 views

The vulnerability of the Qualcomm QTEE API in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm QTEE API in the Android operating system is related to errors in handling array indexes. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01252EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2018/05/10 2:29 p.m.20 views

CVE-2017-6289

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/05/10 2:0 p.m.21 views

CVE-2017-6289

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

6.5AI score0.00169EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/04/25 12:0 a.m.8 views

Google Android has an unspecified vulnerability (CNVD-2018-10037)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

10CVSS7AI score0.0118EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/03/21 12:0 a.m.9 views

The vulnerability of the Trustlet component of Samsung’s microsoftware and Exynos chips allows a hacker to execute arbitrary code within the Trusted Execution Environment (TEE) and gain access to protected information.

The vulnerability of the Trustlet microprogramming system in Samsung Mobile devices and Exynos chips is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the TEE Trusted Execution Environment and gain access to...

9.3CVSS6.4AI score0.01797EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/02/15 12:0 a.m.9 views

The vulnerability of the message transfer interface (Qualcomm Trusted Execution Environment) of the Android operating system, which allows a perpetrator to execute arbitrary code

The vulnerability of the message transmission interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score0.00726EPSS
SaveExploits0References4
OSV
OSV
added 2018/01/04 6:29 a.m.5 views

CVE-2018-5210

On Samsung mobile devices with N7.x software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information PIN, password, or pattern. The Samsung ID is SVE-2017-10733...

8.1CVSS5.8AI score0.01797EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/04 12:0 a.m.8 views

OP-TEE libMPA Information Disclosure Vulnerability

OP-TEE is a set of open source trusted execution environments. libMPA is one of the dynamic connection libraries. An information disclosure vulnerability exists in the Montgomery portion of libMPA in OP-TEE 2.4.0 and earlier. An attacker can exploit this vulnerability to recover a private key...

5.9CVSS6.4AI score0.01565EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/22 7:29 p.m.6 views

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

7.8CVSS6AI score0.01067EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/11/22 7:0 p.m.28 views

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

8AI score0.01067EPSS
SaveExploits0References1
CVE
CVE
added 2017/11/22 7:0 p.m.61 views

CVE-2017-8142

CVE-2017-8142 affects Huawei Mate 9 and Mate 9 Pro devices, where the TEE module driver is vulnerable to a Use-After-Free (UAF). The issue occurs on software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221. An attacker can entice a user to install a malicious app that spawns multiple ...

9.3CVSS8AI score0.01067EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/08/03 12:0 a.m.9 views

The vulnerability of the Android operating system lies in its lack of access control during user authentication. This allows attackers to replicate previously intercepted responses and use the Trusted Execution Environment (TEE) without being detected.

The vulnerability of the Android operating system is related to deficiencies in access control during user authentication. Exploiting this vulnerability allows a malicious actor to utilize the Trusted Execution Environment TEE without verifying the authenticity of the environment, and to replicat...

7.2CVSS6.4AI score0.0019EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/07/17 1:18 p.m.21 views

CVE-2016-10398

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

7.2CVSS6.4AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/17 1:18 p.m.2 views

CVE-2016-10398

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

6.2CVSS5.8AI score0.0019EPSS
SaveExploits0References1
Prion
Prion
added 2017/07/17 1:18 p.m.19 views

Authentication flaw

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

7.2CVSS7.2AI score0.0019EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder