Lucene search
+L

662 matches found

CNNVD
CNNVD
added 2021/11/05 12:00 a.m.13 views

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A buffer error vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Nov-2021 Release 1, which stems from a lack of input validation in HDCP LDFW,...

7.2CVSS5.5AI score0.00103EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/13 12:00 a.m.12 views

The vulnerability of the TrustZone microprogramming technology implementation in Cisco IP Phone series 8800 allows a intruder to execute arbitrary code.

The vulnerability of the TrustZone microprogramming system implementation in Cisco IP Phone series 8800 devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.2CVSS7AI score0.00304EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/22 5:15 p.m.8 views

CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

6.8CVSS7.1AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/22 5:15 p.m.26 views

CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

6.8CVSS0.00304EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/22 5:15 p.m.23 views

Code injection

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

4.6CVSS7.1AI score0.00304EPSS
SaveExploits0References1Affected Software15
CVE
CVE
added 2021/07/22 4:53 p.m.64 views

CVE-2021-33478

The CVE-2021-33478 issue concerns the TrustZone implementation in Broadcom MediaxChange firmware, affecting Cisco IP Phone and Wireless IP Phone devices. The vulnerability allows an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone TEE, with explo...

6.8CVSS7AI score0.00304EPSS
SaveExploits0References1Affected Software15
Cvelist
Cvelist
added 2021/07/22 4:53 p.m.32 views

CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment TEE of an affected device. This, for example, affects certain Cisco IP Phone and...

7.2AI score0.00304EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/07/07 4:00 p.m.93 views

Broadcom MediaxChange Vulnerability Affecting Cisco Products: July 2021

A vulnerability in the TrustZone implementation in certain Broadcom MediaxChange firmware was reported by security researchers. To exploit this vulnerability on the affected Cisco products, the attacker would need to dismount the backplate of the device and trigger a specific series of impulses o...

6.8CVSS7AI score0.00304EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/07 12:00 a.m.10 views

Broadcom Media exChange 缓冲区错误漏洞

Broadcom Media exChange is a router firmware. A security vulnerability exists in TrustZone in Broadcom Media exChange, which can be exploited by an attacker to elevate privileges and execute arbitrary code...

6.8CVSS7AI score0.00304EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/21 10:15 p.m.9 views

CVE-2021-34387

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

6.7CVSS5.9AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/21 10:15 p.m.29 views

CVE-2021-34387

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

7.2CVSS0.00205EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/21 10:15 p.m.28 views

Design/Logic Flaw

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

7.2CVSS6.7AI score0.00205EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/06/21 10:15 p.m.23 views

Design/Logic Flaw

Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user through a malicious client to access memory from the heap in the TrustZone, which may lead to information disclosure...

1.9CVSS5.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/21 9:35 p.m.39 views

CVE-2021-34389

Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user through a malicious client to access memory from the heap in the TrustZone, which may lead to information disclosure...

5CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/21 9:35 p.m.38 views

CVE-2021-34387

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

6.3CVSS7.2AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/21 9:35 p.m.81 views

CVE-2021-34387

CVE-2021-34387 affects NVIDIA Jetson Trusty TLK/Trusty on TrustZone. The vulnerability arises from access permission settings where the DRAM region reserved for TrustZone is identity-mapped by the TLK with read, write, and execute permissions, allowing write access to kernel code and data that sh...

7.2CVSS6.7AI score0.00205EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.10 views

NVIDIA TLK 访问控制错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. The NVIDIA TLK suffers from an Access Control Error vulnerability that stems from the fact that the ARM® TrustZone technology, on which Trusty is based, contains a vulnerability in the access...

7.2CVSS6.8AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/09 5:15 a.m.25 views

CVE-2020-11256

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking...

8.8CVSS0.00178EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/09 5:15 a.m.25 views

CVE-2020-11259

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking...

8.8CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/09 5:15 a.m.27 views

CVE-2020-11257

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking...

8.8CVSS0.00182EPSS
SaveExploits0References1
Rows per page
Query Builder