CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

Buffer overflow

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2017-17176

CVE-2017-17176 affects Huawei Mate 9 and Mate 9 Pro hardware security module prior to builds MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, LON-TL00BC00B156. Root-level Android access could trigger arbitrary memory rea...

Arbitrary Memory Read/Write Vulnerability in Multiple Huawei Phones

The Huawei Mate 9 and Mate 9 Pro are both smartphone products from the Chinese company Huawei Huawei. An arbitrary memory read/write vulnerability exists in multiple Huawei phones. The vulnerability is due to insufficient input checksums in the hardware security module of some Huawei phones. An...

CVE-2017-18280

In Snapdragon Automobile, Mobile, Wear in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, SnapdragonHighMed2016, when a Trusted Application has opened the SPI/I2C...

CVE-2018-11950

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850...

The vulnerability of the NVIDIA Tegra X1 TZ operating system allows a hacker to increase their privileges.

The vulnerability of the NVIDIA Tegra X1 TZ operating system’s Android platform arises from data writing beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

Integer overflow

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6292

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

Integer overflow

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6292

Summary: CVE-2017-6292 is an integer overflow in NVIDIA TLZ TrustZone’s TA-to-TA communication handler that can cause an out-of-bounds write, potentially enabling local code execution or denial of service within TrustZone. Affected: NVIDIA TLZ TrustZone OS components on Android devices (notably S...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6290

CVE-2017-6290 affects NVIDIA TLK TrustZone in Tegra on SHIELD TV. It describes a potential local escalation of privilege via an out-of-bounds write caused by an integer overflow, with no user interaction required. NVIDIA’s bulletin redirects to Android patching: affected SHIELD TV platforms requi...

CVE-2017-6292

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-12655)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component TLZ TrustZone. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-13161)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component TLK TrustZone. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android has an unspecified vulnerability (CNVD-2018-10121)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm FSM9055 and other central processing unit CPU products from Qualcomm for different platforms. A security vulnerability exists in the Qualcomm closed-source component ...