841 matches found
CVE-2017-6296
NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...
CVE-2017-6296
NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...
CVE-2017-6295: Out-of-bounds Read
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...
PT-2018-8340
Name of the Vulnerable Software and Affected Versions NVIDIA TrustZone Software affected versions not specified Description The issue in NVIDIA TrustZone Software is related to a Time-of-Check-to-Time-of-Use TOCTOU problem in the Digital Rights Management DRM application. This could potentially...
PT-2018-8339
Name of the Vulnerable Software and Affected Versions NVIDIA TrustZone Software affected versions not specified Description The issue is related to a buffer overflow in the Keymaster implementation of the software, where it reads data past the end or before the beginning of the intended buffer...
CVE-2017-6296: Concurrent Execution using Shared Resource with Improper Synchronization
NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...
PT-2018-1967
Name of the Vulnerable Software and Affected Versions Qualcomm TrustZone versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, SDX24 Description The issue is related to...
Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities
NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...
Multiple Vulnerabilities Found in NVIDIA, Qualcomm and Huawei's Bootloaders
Six exploitable flaws in chipsets used by Huawei, Qualcomm, MediaTek and NVIDIA were found in popular Android handsets, according to a report by University of California at Santa Barbara computer scientists. Each of the flaws exist in phones sold by Huawei, Sony and Google, and are tied to each o...
Android CAF-release TrustZone Data Compromise
The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Android CAF-release TrustZone Data Compromise
The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
TrustZone Component Unauthorized Access
The vulnerability of the TrustZone component of the Android operating system from the CAF repository relates to the use of an uninitialized variable during system calls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected memor...
Android CAF-release TrustZone Data Compromise
The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Android CAF-release TrustZone Data Compromise
The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Google Android Qualcomm Component Null Pointer Reference Vulnerability
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the TrustZone syscall of the Qualcomm closed-source...
Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26924)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the TrustZone syscall of the Qualcomm closed-source...
Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-25680)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A buffer overflow vulnerability exists in the QTEE service of the Qualcomm closed-sourc...
Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-26926)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the TrustZone syscall of the Qualcomm closed-source...
