Linux kernel Heap Buffer Overflow DoS

The vulnerability of the scmsmccall function in the drivers/firmware/qcom/qcomscm-smc.c driver for Linux kernel-based operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

EUVD-2016-9328

Malware in sbrugna...

EUVD-2016-6300

Malware in sbrugna...

firmware: qcom: scm: Mark get_wq_ctx() as atomic call

...

Qualcomm Secure Display Buffer Overflow

The vulnerability of the Qualcomm Secure Display component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger buffer overflows...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26917)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A competitive condition vulnerability exists in the Secure UI of the Qualcomm...

Qualcomm Secure Execution Environment Privilege Escalation

The vulnerability of Qualcomm Secure Execution Environment for Android, found in the CAF repository, is related to improper verification of the cryptographic signature in PKCS1 mode. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Qualcomm Secure Execution Environment Kernel Module Access

The vulnerability of the HLOS microprogramming software component of Qualcomm Secure Execution Environment for Android exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to kernel modules beyond their authorize...

Qualcomm Secure Execution Environment

The vulnerability of Qualcomm Secure Execution Environment for Android, found in the CAF repository, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access control policies through improper page alignment...

Qualcomm Secure Execution Environment DoS

The vulnerability of the OEM microprogramming software component of Qualcomm Secure Execution Environment for Android, originating from the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to trigger service failures or cause other...

PT-2017-2124

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description The issue is related to an integer overflow vulnerability in TrustZone technology, specifically in the Qualcomm Secure Execution Environment microprogram software for Android from th...

PT-2017-2117

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment affected versions not specified Android all releases from CAF using the Linux kernel Description The issue is caused by an integer overflow, leading to a buffer overflow in memory. This could allow a remot...

PT-2017-2123

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment technology, specifically in the TrustZone...

PT-2017-2129

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A time-of-check time-of-use race condition could potentially exist in an authentication routine in TrustZone. This issue is caused by synchronization errors when using a shared...

PT-2017-2132

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment for Android versions affected versions not specified Description The issue exists due to insufficient input validation in the HLOS microprogram component of the Qualcomm Secure Execution Environment for...

PT-2017-2131

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to incorrect verification of cryptographic signatures in PKCS1 mode. This could allow a remote attacker to elevate their privileges...

PT-2017-2127

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by an integer overflow in the Qualcomm Secure Execution Environment microprogram technology for Android from the CAF repository. Thi...

PT-2017-2121

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to errors in number processing within the TrustZone technology, specifically in the DRM subroutine of the Qualcomm Secure Execution...

PT-2017-2128

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by a buffer overflow in the TrustZone technology's DRM subroutine of the Qualcomm Secure Execution Environment microprogram for...

PT-2017-2134

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment component of the OEM software for Android. This vulnerability can be exploited by...