CVE-2024-21461

CVE-2024-21461 is a memory-corruption issue in the Keymaster finish-HMAC path triggered when the context is freed by Keymaster. Public details in connected docs indicate the vulnerability affects Android/Keymaster workflows and is rated HIGH severity with local access requirements (per CVSS). Exp...

PT-2024-18884 · Keymaster · Keymaster

Name of the Vulnerable Software and Affected Versions: Keymaster affected versions not specified Description: The issue involves memory corruption that occurs during the finish HMAC operation when the context is freed by the keymaster. This is a general information about the problem, but specific...

CVE-2023-24850

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

Memory corruption

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

CVE-2023-24850

CVE-2023-24850 describes memory corruption in HLOS when importing a cryptographic key into the KeyMaster Trusted Application. The vulnerability is associated with Qualcomm closed-source components and is classified with a high impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U; C/H/I/A=HIGH). The descrip...

CVE-2023-24850 Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

CVE-2023-24850 Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

Qualcomm Chip Input Validation Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from an input validation error vulnerability that...

PT-2023-19825 · Qualcomm · Snapdragon +180

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected in the provided descriptions. Description: The issue involves memory corruption in HLOS when importing a cryptographic key into the KeyMaster Trusted Application. This occurs due to a...

CVE-2021-46887

Lack of length check vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read...

CVE-2021-46887

Lack of length check vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read...

Out-of-bounds

Lack of length check vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read...

PT-2023-12607 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER module affected versions not specified Description: The issue is related to a lack of length check in the HW KEYMASTER module, which may lead to out-of-bounds read when successfully exploited. Recommendations: At the moment, ther...

CVE-2021-46867

The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...

CVE-2021-46868

The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...

PT-2023-12593 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...

PT-2023-12594 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...

HUAWEI EMUI/Magic UI 缓冲区错误漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from the HWKEYMASTER module...

HUAWEI EMUI/Magic UI 缓冲区错误漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from the HWKEYMASTER module...

CVE-2022-41581

The HWKEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access...