CVE-2015-9000

In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

CVE-2014-9935

In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

CVE-2015-9002

This CVE concerns Google Android TrustZone, where a DRM routine in the TrustZone DRM path can suffer an out-of-range pointer offset (integer overflow) vulnerability. Connected CNVD entry explicitly states an integer overflow in the TrustZone DRM routine exists on Android, and that an attacker cou...

CVE-2015-8997

In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel...

CVE-2015-9001

Technical details, affected components, and remediation for CVE-2015-9001 are not publicly provided in the connected documents. Monitor updates from NVD/Android sources.

CVE-2014-9932

CVE-2014-9932 is described across connected sources as an integer overflow in TrustZone, potentially affecting Android on Pixel/Pixel XL devices via CAF/Linux kernel, caused by improper address range computation. The NVD entry notes a TrustZone integer overflow across all CAF Android releases usi...

CVE-2015-8999

CVE-2015-8999: The vulnerability is described as a TrustZone buffer overflow that can occur in Android CAF builds when loading an ELF file. Connected sources corroborate a TrustZone buffer overflow in Android’s TrustZone component with potential for arbitrary code execution or denial of service, ...

CVE-2015-8996

In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel...

CVE-2015-8995

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

PT-2017-2121

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to errors in number processing within the TrustZone technology, specifically in the DRM subroutine of the Qualcomm Secure Execution...

CVE-2015-9003: Undefined Security Weakness

In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel...

PT-2017-2126

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A time-of-check time-of-use race condition could potentially exist in a QFPROM routine in TrustZone, caused by synchronization errors when using a shared resource. This issue may all...

CVE-2014-9936: Concurrent Execution using Shared Resource with Improper Synchronization

In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel...

CVE-2016-10239: Improper Restriction of Operations within the Bounds of a Memory Buffer

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occ...

CVE-2015-9001: Exposure of Sensitive Information to an Unauthorized Actor

In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

CVE-2015-8996: Concurrent Execution using Shared Resource with Improper Synchronization

In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel...

CVE-2015-8995: Integer Overflow or Wraparound

In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

CVE-2014-9935: Integer Overflow or Wraparound

In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

PT-2017-2120

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A cryptographic issue can potentially occur in TrustZone, related to errors in cryptographic transformations. This issue may allow a remote attacker to elevate their privileges...

PT-2017-2122

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description The issue is related to an untrusted pointer dereference vulnerability in a DRM routine within TrustZone, potentially affecting all Android releases from CAF that utilize the Linux...