1695 matches found
CVE-2016-10337
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed...
Race condition
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...
Integer overflow
In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated...
Stack overflow
In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption...
Code injection
In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters...
Race condition
In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver...
Race condition
In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot...
Code injection
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...
Code injection
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated...
Code injection
In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended...
Improper access control
In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled...