Google Android Qualcomm QTEECOM Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm QTEECOM driver The Qualcomm QTEECOM driver is one of the Secure Execution Environment Communicator drivers. A...

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm QTEE API in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm QTEE API in the Android operating system is related to errors in handling array indexes. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2017-6289

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

CVE-2017-6289

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

CVE-2017-6289: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

PT-2018-1374

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue is related to a memory corruption vulnerability in the NVIDIA Trusted Execution Environment TEE component of the Android operating system. This vulnerability m...

Google Android has an unspecified vulnerability (CNVD-2018-10037)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

The vulnerability of the Trustlet component of Samsung’s microsoftware and Exynos chips allows a hacker to execute arbitrary code within the Trusted Execution Environment (TEE) and gain access to protected information.

The vulnerability of the Trustlet microprogramming system in Samsung Mobile devices and Exynos chips is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the TEE Trusted Execution Environment and gain access to...

The vulnerability of the message transfer interface (Qualcomm Trusted Execution Environment) of the Android operating system, which allows a perpetrator to execute arbitrary code

The vulnerability of the message transmission interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2018-5210

On Samsung mobile devices with N7.x software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information PIN, password, or pattern. The Samsung ID is SVE-2017-10733...

OP-TEE libMPA Information Disclosure Vulnerability

OP-TEE is a set of open source trusted execution environments. libMPA is one of the dynamic connection libraries. An information disclosure vulnerability exists in the Montgomery portion of libMPA in OP-TEE 2.4.0 and earlier. An attacker can exploit this vulnerability to recover a private key...

PT-2018-1070

Name of the Vulnerable Software and Affected Versions Samsung Mobile devices with N7.x software and Exynos chipsets Description The issue is related to a stack buffer overflow in the Trustlet component of Samsung Mobile microprogram software and Exynos chipsets. This can be exploited by a remote...

PT-2018-1284

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-01-05 Description The issue is related to insufficient access control in the Qualcomm Trusted Execution Environment component of the Android operating system. This could allow a remote attacker to impact the...

PT-2017-3665

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to the Qualcomm Trusted Execution Environment component in the Android operating system, which is associated with incorrect ECDSA cryptographic...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

CVE-2017-8142

CVE-2017-8142 affects Huawei Mate 9 and Mate 9 Pro devices, where the TEE module driver is vulnerable to a Use-After-Free (UAF). The issue occurs on software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221. An attacker can entice a user to install a malicious app that spawns multiple ...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

PT-2017-3693

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to an out-of-bounds access in the tz assign function, potentially allowing a remote attacker to impact the confidentiality, integrity, and availabilit...

PT-2017-3695

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to the Qualcomm Trusted Execution Environment component in the Android operating system, specifically concerning insufficient access control when usin...