CVE-2016-10434: Improper Authentication

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLOS that needs to be authenticated using HMAC and then processed. However, some of the processing...

PT-2018-4671

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises from the processing of a buffer from HLOS in the RPMB write response function before it is authenticated using HMAC. This can lead to various errors dependi...