CVE-2016-10409: Concurrent Execution using Shared Resource with Improper Synchronization

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers...

PT-2018-4652

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue may occur in Android while composing the RPMB request using HLOS controlled buffers, potentially affecting devices with Qualcomm...

PT-2018-1207

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by an error in the calculation of the buffer size in the RPMB Replay Protected Memory Block handler, which can lead to a buffer overflow. This can be...

PT-2017-13741

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue arises when handling the QSEOS RPMB CHECK PROV STATUS COMMAND, where a userspa...

CVE-2016-10338

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

Code injection

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

CVE-2016-10338

Technical details about CVE-2016-10338 are not publicly provided in the connected documents. The available descriptions simply note an RPMB processing issue in CAF Android kernels. Monitor for updates; no specifics on impact, affected versions, or fixes are provided.

CVE-2016-10338

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

PT-2017-2301

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to RPMB processing in the Android operating system. It is caused by insufficient input validation, which can allow a remote attacker to bypass certificate verification...

CVE-2016-10338: Improper Input Validation

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

CVE-2016-10338

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

Buffer overflow

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR988462...

CVE-2016-8459

CVE-2016-8459 (Android) describes a possible buffer overflow in the storage subsystem, triggered by bad parameters in RPMB listener responses. The issue affects Android kernel 3.18 and is associated with the RPMB command handling, potentially leading to a write/overflow condition in kernel memory...

PT-2017-1096

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a possible buffer overflow in the storage subsystem of the Android operating system. This can occur due to bad parameters in listener responses to RPMB commands,...

CVE-2016-8459: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR988462...