The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a hacker to gain access to local files.

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to gain access to local files...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of the HLOS component of Qualcomm Secure Execution Environment allows a perpetrator to gain access to kernel modules beyond their authorized scope.

The vulnerability of the HLOS microprogramming software component of Qualcomm Secure Execution Environment for Android exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to kernel modules beyond their authorize...

RW-4040 tool to verify execution environment may insecurely load Dynamic Link Libraries

Overview RW-4040 tool to verify execution environment for IC Card Reader/Writer devices provided by Sharp Corporation contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation and BlackWingCat of...

JVN#51274854: Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries

The tool to verify execution environment and the driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contain an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege o...

PT-2017-2134

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment component of the OEM software for Android. This vulnerability can be exploited by...

PT-2017-2123

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment technology, specifically in the TrustZone...

PT-2017-2131

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to incorrect verification of cryptographic signatures in PKCS1 mode. This could allow a remote attacker to elevate their privileges...

PT-2017-2121

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to errors in number processing within the TrustZone technology, specifically in the DRM subroutine of the Qualcomm Secure Execution...

PT-2017-2128

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by a buffer overflow in the TrustZone technology's DRM subroutine of the Qualcomm Secure Execution Environment microprogram for...

PT-2017-2129

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A time-of-check time-of-use race condition could potentially exist in an authentication routine in TrustZone. This issue is caused by synchronization errors when using a shared...

PT-2017-2127

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by an integer overflow in the Qualcomm Secure Execution Environment microprogram technology for Android from the CAF repository. Thi...

PT-2017-2117

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment affected versions not specified Android all releases from CAF using the Linux kernel Description The issue is caused by an integer overflow, leading to a buffer overflow in memory. This could allow a remot...

PT-2017-2124

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description The issue is related to an integer overflow vulnerability in TrustZone technology, specifically in the Qualcomm Secure Execution Environment microprogram software for Android from th...

PT-2017-2132

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment for Android versions affected versions not specified Description The issue exists due to insufficient input validation in the HLOS microprogram component of the Qualcomm Secure Execution Environment for...

CVE-2017-0614

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2017-0613

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2017-0614

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

Privilege escalation

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2017-0614

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...