UE Component Android CAF-release Data Compromise

The vulnerability of the UE component in the Android CAF-release operating system is related to positioning errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when the UE driver sends unprotected...

Android CAF-release Bypass Validation

The vulnerability of the Android CAF-release operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to improperly validate the arguments of the supervisor function...

Android CAF-release Configuration Error

The vulnerability of the Android CAF-release operating system is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when loading the external application QTEE...

Android CAF-release TrustZone Data Compromise

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Android CAF-release Memory Use After Free

The vulnerability of the Android CAF-release operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to create a situation where, when the mdssfbcopydestscalerdata function is called, the dsdatai.scale variable may still point to ...

Android CAF-release Supervisor Data Compromise

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Android CAF-release Buffer Overflow Memory Leak

The vulnerability of the Android CAF-release operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger a memory leak when a connection is denied for the clientHello message, which is a cryptographi...

Android CAF-release TrustZone Data Compromise

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Android CAF-release TrustZone Data Compromise

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Android CAF-release Insufficient Validation File System Damage

The vulnerability of the Android CAF-release operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a remote attacker to cause damage to the protected file system...

Android CAF-release Bypass Validation

The vulnerability of the Android CAF-release operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to improperly validate system calls to mink...

Android CAF-release Security Configuration Error

The vulnerability of the Android CAF-release operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by having the UE component respond to the...

Android CAF-release Access Control Data Compromise

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...