4726 matches found
CVE-2016-10409: Concurrent Execution using Shared Resource with Improper Synchronization
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers...
CVE-2016-10417: Improper Access Control
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...
CVE-2015-9161: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, TOCTOU condition could lead to a buffer overflow in function...
PT-2018-4316
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior on Qualcomm Snapdragon Mobile MDM9635M, SD 400,...
PT-2018-4495
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU condition in Android could lead to a buffer overflow in the playready reader bind function. This issue affects devices with Qualcomm...
PT-2018-4652
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue may occur in Android while composing the RPMB request using HLOS controlled buffers, potentially affecting devices with Qualcomm...
PT-2018-4658
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A TOCTOU vulnerability exists in QTEE due to improper access control, affecting Android on various Qualcomm Snapdragon platforms. Recommendations For Android versions prior ...
PT-2018-4670
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue occurs during SSD image decryption, potentially leading to memory corruption. This issue affects Qualcomm Snapdragon Automobile,...
PT-2018-4669
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue may occur in Android while sanitizing userspace values passed to the tQSEE system call on certain Qualcomm Snapdragon processors...
PT-2018-4672
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue exists in some QTEE syscall handlers on certain Qualcomm Snapdragon processors. This issue affects Android devices with these...
PT-2018-4675
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a TOCTOU vulnerability in the input validation for the bulletin board read syscall. This vulnerability occurs because a pointer dereference is being...
CVE-2016-10433: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808...
CVE-2016-10435: Concurrent Execution using Shared Resource with Improper Synchronization
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...
Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix Exploit
Exploit for windows platform in category dos / poc Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached signin...
Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix
Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached...
Microsoft Windows - 'CiSetFileCache' TOCTOU Incomplete Fix
Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached signing level to an unsigned file by exploiting a TOCTOU ...
CVE-2018-0966: Time-of-check Time-of-use (TOCTOU) Race Condition
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
Race condition
It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...
CVE-2017-12410
It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...
