Lucene search
+L

226 matches found

Prion
Prion
•added 2019/09/27 7:15 p.m.•20 views

Design/Logic Flaw

In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...

4.6CVSS8.1AI score0.00156EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/09/27 6:05 p.m.•63 views

CVE-2019-9350

CVE-2019-9350 corresponds to an Elevation of Privilege in Android 10 Keymaster, caused by a use-after-free in a component handling crypto operations. This vulnerability could allow a local attacker to escalate privileges without additional execution privileges or user interaction, as described ac...

7.8CVSS8.1AI score0.00156EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/09/27 6:05 p.m.•53 views

CVE-2019-9350

In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...

8.2AI score0.00156EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/27 12:00 a.m.•2 views

CVE-2019-9350: Use After Free

In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815...

7.8CVSS7.4AI score0.00156EPSS
SaveExploits0References2
OSV
OSV
•added 2019/02/28 5:29 p.m.•13 views

CVE-2019-1998

In eventhandler of keymasterapp.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

5.5CVSS6.5AI score0.00176EPSS
SaveExploits0References2
Prion
Prion
•added 2019/01/18 10:29 p.m.•30 views

Input validation

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

7.2CVSS7.6AI score0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2019/01/18 10:29 p.m.•30 views

CVE-2018-5869

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

7.8CVSS7.6AI score0.00223EPSS
SaveExploits0References2
CVE
CVE
•added 2019/01/18 10:00 p.m.•69 views

CVE-2018-5869

CVE-2018-5869 concerns improper input validation in the QTEE keymaster app, leading to invalid memory access on Qualcomm Snapdragon mobile/wear platforms. Affected are devices using several Snapdragon families (e.g., MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 410/12, SD 615/16/SD 415, SD 800,...

7.8CVSS7.3AI score0.00223EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/01/18 10:00 p.m.•40 views

CVE-2018-5869

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

7.6AI score0.00223EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/18 12:00 a.m.•4 views

CVE-2018-5869: Improper Input Validation

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

7.8CVSS5.7AI score0.00223EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/12/25 12:00 a.m.•12 views

The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system allows a intruder to gain access to memory.

The vulnerability of the Qualcomm QTEE keymaster component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to memory...

8.6CVSS7.2AI score0.00223EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/03/08 12:00 a.m.•19 views

NVIDIA SHIELD TV TrustZone Software Denial of Service Vulnerability

The NVIDIA SHIELD TV is a gaming console device from NVIDIA, U.S.A. TrustZone Software is one of the system-wide security software.... A security vulnerability exists in the Keymaster implementation of TrustZone Software in NVIDIA SHIELD TV SE 6.2 and earlier. An attacker could exploit this...

8.4CVSS6.6AI score0.00135EPSS
SaveExploits0References1
Prion
Prion
•added 2018/03/06 4:29 p.m.•30 views

Information disclosure

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...

3.6CVSS7.7AI score0.00135EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/03/06 4:29 p.m.•16 views

CVE-2017-6295

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...

8.4CVSS5.5AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
•added 2018/03/06 4:29 p.m.•24 views

CVE-2017-6295

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...

8.4CVSS7.9AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/03/06 4:00 p.m.•32 views

CVE-2017-6295

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...

8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/06 4:00 p.m.•71 views

CVE-2017-6295

Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...

8.4CVSS7.9AI score0.00135EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/06 12:00 a.m.•6 views

CVE-2017-6295: Out-of-bounds Read

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...

8.4CVSS7.7AI score0.00135EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•19 views

The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/08/19 12:00 a.m.•15 views

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-26641)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component of Android, which stems from a failure of...

10CVSS9.7AI score0.00836EPSS
SaveExploits0References1
Rows per page
Query Builder