839 matches found
CVE-2016-0825
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
CVE-2016-0825
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
CVE-2016-0825
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
CVE-2016-0825
The CVE-2016-0825 issue concerns the Widevine Trusted Application on Android 6.0.1 before 2016-03-01. According to the sources, an attacker with kernel access could disclose TrustZone secure-storage information, demonstrated by obtaining Signature or SignatureOrSystem permissions. The vulnerabili...
PT-2016-1583
Name of the Vulnerable Software and Affected Versions Android 6.0.1 before 2016-03-01 Description The issue allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access. This can be achieved by obtaining Signature or SignatureOrSystem access. The...
CVE-2016-0825: Exposure of Sensitive Information to an Unauthorized Actor
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039...
Android Privilege Escalation
The vulnerability of the Widevine QSEE TrustZone application in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application that utilizes QSEECOM...
Android Trustzone 权限提升漏洞
No description provided by source...
Android Trustzone elevation of privilege vulnerability, CVE-2 0 1 5-6 6 3 9-a vulnerability warning-the black bar safety net
Affected system: Android Android Description: CVECAN ID: CVE-2 0 1 5-6 6 3 9 Android is a Linux-based open kernel Phoneoperating system. Android 5.1.1 LMY49F before 5. x version, 2016-01-0 1 before the 6. 0 version, Trustzone applications on the realization of the presence of security...
Android Trustzone elevation of privilege vulnerability (CNVD-2016-00122)
Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Widevine QSEE TrustZone app in version 5.x prior to Android 5.1.1 LMY49F, and version 6.0 prior to 2016-01-01. A remote attacker can gain elevated privileges by...
Android Trustzone Elevation of Privilege Vulnerability
Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Trustzone application in version 5.x prior to Android 5.1.1 LMY49F, and version 6.0 prior to 2016-01-01. A remote attacker can exploit the vulnerability to gain...
CVE-2015-6647
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554...
CVE-2015-6639
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875...
Code injection
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554...
PT-2016-1003 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: Android versions 5.x through 5.1.1 before LMY49F Android versions 6.0 before 2016-01-01 Description: The issue is related to insufficient access control in the Widevine QSEE TrustZone application. It allows attackers to gain privileges via a...
CVE-2015-6647
CVE-2015-6647 is a privilege-escalation in the Widevine QSEE TrustZone app on Android. A crafted app exploiting QSEECOM access could grant elevated privileges on devices running Android 5.x before 5.1.1 LMY49F and Android 6.0 before 2016-01-01. Mitigation/fixes are provided by Android patches: An...
CVE-2015-6647: Undefined Security Weakness
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554...
CVE-2015-6639: Undefined Security Weakness
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875...
CVE-2015-6639
CVE-2015-6639 details: A privilege-escalation in the Widevine QSEE TrustZone app on Android 5.x (before 5.1.1 LMY49F) and 6.0 (before 2016‑01‑01) allows a crafted app with QSEECOM access to gain privileges. Root cause involves trustlet/TrustZone interaction enabling local escalation via the QSEE ...
PT-2016-1009 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: Android versions 5.x through 5.1.1 before LMY49F Android versions 6.0 before 2016-01-01 Description: The issue is related to insufficient access control in the Widevine QSEE TrustZone application. It allows attackers to gain privileges via a...