CVE-2015-9073: NULL Pointer Dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall...

Trust Issues: Exploiting TrustZone TEEs

Posted by Gal Beniamini, Project Zero Mobile devices are becoming an increasingly privacy-sensitive platform. Nowadays, devices process a wide range of personal and private information of a sensitive nature, such as biometric identifiers, payment data and cryptographic keys. Additionally, modern...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-18950)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone of Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm Component Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the listener routine of TrustZone for Google Android. An attack could exploit this vulnerability to perform unauthorized operations...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18947)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the DRM routine of TrustZone for Google Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial...

Google Android Qualcomm Component Integer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in the DRM routine of TrustZone for Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18943)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Google Android's TrustZone. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18946)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the QFPROM routine of TrustZone for Google Android. An attack could exploit the vulnerability to perform unauthorized operations...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18948)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the authentication routine of TrustZone in versions of Android prior to 7.0. An attack could exploit the vulnerability to perform...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-18942)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android's TrustZone. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Qualcomm Component Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Google Android's TrustZone. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-18951)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone of Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android integer overflow vulnerability (CNVD-2017-16015)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone in Android on Pixel and Pixel XL devices. An attacker can exploit this...

Google Android Memory Address Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. The vulnerability can be exploited by an attacker to obtain the TZ memory address...

TrustZone Local File Access

The vulnerability of the TrustZone component in the Android operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to gain access to local files...

TrustZone Android

The vulnerability of the TrustZone component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to perform actions that were not intended by the browser interface...

TrustZone Memory Access DoS

The vulnerability of the TrustZone component in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the process’s dynamic memory or cause a service failure...

TrustZone Component Access

The vulnerability of the TrustZone component in the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

TrustZone Information Disclosure

The vulnerability of the TrustZone component in the Android operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow a remote attacker to gain access to sensitive information...

TrustZone Decoding

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...