PT-2014-2599

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue allows attackers to overwrite signature-verification code by crafting boot-image load-destination header values that specify memory locations within bootloader...

CVE-2013-2598: Improper Input Validation

app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory...

PT-2014-5811

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue allows attackers to bypass intended device-lock and kernel-signature restrictions. This is achieved by using fastboot mode in a boot command for an arbitrary...

PT-2014-3988

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue is related to the image verify function in the Little Kernel LK bootloader, which does not properly check the digest size consistency with the RSA public decrypt...

PT-2014-3989

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue is related to the boot linux from mmc function in the Little Kernel LK bootloader, which does not properly validate a certain address value. This allows attacker...

CVE-2014-0973: Improper Authentication

The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...

CVE-2014-4325: Improper Authentication

The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...