179 matches found
PT-2018-1224
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by a buffer overflow in the Linux kernel of the Android operating system. This can allow a remote attacker to impact the confidentiality, integrity, and availability of...
Code injection
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...
CVE-2017-9716
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...
CVE-2017-9716
CVE-2017-9716 affects the Qualcomm Qbt1000 driver (Qualcomm components) in Android for MSM and related CAF-based kernels. The vulnerability is described as an Elevation of Privilege (EoP) issue, with CVE records (NVD, CVELIST, CNVD) confirming the driver as the vulnerable component and noting an ...
CVE-2017-9716
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...
CVE-2017-9716: Undefined Security Weakness
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...
PT-2017-19130
Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The qbt1000 driver in the Linux kernel implements an alternative channel for usermode...
Trust Issues: Exploiting TrustZone TEEs
Posted by Gal Beniamini, Project Zero Mobile devices are becoming an increasingly privacy-sensitive platform. Nowadays, devices process a wide range of personal and private information of a sensitive nature, such as biometric identifiers, payment data and cryptographic keys. Additionally, modern...
CVE-2016-10238
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...
Improper access control
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...
CVE-2016-10238
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...
CVE-2016-10238
CVE-2016-10238 concerns the QSEE component in CAF Android builds. The issue stems from a page-alignment problem that could potentially bypass the Linux kernel access control. The vulnerability is described as a local issue within QSEE across Android releases from CAF, with the impact explicitly s...
CVE-2016-10238: Undefined Security Weakness
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...
PT-2017-2118
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a page alignment problem in the Qualcomm Secure Execution Environment QSEE for Android, which may allow an attacker to bypass access control. This could potentially...
CVE-2016-5349
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
CVE-2016-5349
Technical details for CVE-2016-5349 are not provided in the connected documents. Public disclosures contain general descriptions only; no concrete product/vendor/version/root-cause or fix information is available here. Monitor for updates from official advisories.
CVE-2016-5349
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
CVE-2016-5349: Exposure of Sensitive Information to an Unauthorized Actor
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
PT-2017-1934
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to the Qualcomm Secure Execution Environment QSEE in the Android operating system. When a secure application in QSEE receives a memory address, it does not verify whether...
