226 matches found
Design/Logic Flaw
In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...
CVE-2019-9350
CVE-2019-9350 corresponds to an Elevation of Privilege in Android 10 Keymaster, caused by a use-after-free in a component handling crypto operations. This vulnerability could allow a local attacker to escalate privileges without additional execution privileges or user interaction, as described ac...
CVE-2019-9350
In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...
CVE-2019-9350: Use After Free
In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...
CVE-2019-1998
In eventhandler of keymasterapp.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...
Input validation
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
CVE-2018-5869
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
CVE-2018-5869
CVE-2018-5869 concerns improper input validation in the QTEE keymaster app, leading to invalid memory access on Qualcomm Snapdragon mobile/wear platforms. Affected are devices using several Snapdragon families (e.g., MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 410/12, SD 615/16/SD 415, SD 800,...
CVE-2018-5869
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
CVE-2018-5869: Improper Input Validation
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...
The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system allows a intruder to gain access to memory.
The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to memory...
NVIDIA SHIELD TV TrustZone Software Denial of Service Vulnerability
The NVIDIA SHIELD TV is a gaming console device from NVIDIA, U.S.A. TrustZone Software is one of the system-wide security software.... A security vulnerability exists in the Keymaster implementation of TrustZone Software in NVIDIA SHIELD TV SE 6.2 and earlier. An attacker could exploit this...
Information disclosure
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
CVE-2017-6295
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
CVE-2017-6295
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
CVE-2017-6295
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
CVE-2017-6295
Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...
CVE-2017-6295: Out-of-bounds Read
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-26641)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component of Android, which stems from a failure of...