CVE-2014-9930

In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist...

CVE-2014-9949

CVE-2014-9949 is described as a TrustZone vulnerability in Android CAF builds that use the Linux kernel. The issue is an Untrusted Pointer Dereference in TrustZone, with impact articulated as high in the CVSS metrics (LOCAL exploit, low attack complexity, user interaction required, and high confi...

CVE-2014-9923

In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist...

CVE-2014-9926

Technical details about CVE-2014-9926 (GNSS Use-After-Free in CAF Linux kernel) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2014-9928

Technical details are not publicly available in the provided documents. Monitor for updates and new disclosures regarding CVE-2014-9928.

CVE-2014-9925

CVE-2014-9925 : In HDR on Android CAF builds using the Linux kernel, there is a vulnerability described as a Buffer Copy without Checking Size of Input. Affected component is HDR handling in CAF Android releases; root cause is unchecked input size during a copy operation, potentially enabling mem...

CVE-2014-9945

CVE-2014-9945 describes an Improper Authorization vulnerability in the TrustZone component on Android releases from CAF that use the Linux kernel. The issue affects TrustZone/CAF Android builds and is described as potentially existing within the TrustZone security boundary. From the CVSS data, th...

CVE-2014-9923

CVE-2014-9923 is described in the provided records as a buffer copy without checking the input size, located in NAS for CAF Android releases using the Linux kernel. The vulnerability path is not fully detailed beyond this memory-unsafe copy, and exploitation details are not provided in the suppli...

The vulnerability of Qualcomm Secure Execution Environment’s microprogramming software allows a perpetrator to gain access to the protected memory of the trusted application.

The vulnerability of Qualcomm Secure Execution Environment for Android, originating from the CAF repository, arises from the lack of use of the HLOS mechanism during the transfer of general content to secure memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a intruder to trigger a service failure or exert other effects on the system.

The vulnerability of the TrustZone technology a part of the DRM subsystem of Qualcomm’s Secure Execution Environment for Android, as provided in the CAF repository, is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a system failure or exert...

The vulnerability of the TrustZone technology (QFPROM mode of Qualcomm Secure Execution Environment) allows for breaches of the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology QFPROM mode of Qualcomm Secure Execution Environment for Android from the CAF repository arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

CVE-2017-7371

In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth...

CVE-2016-10333

In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS...

CVE-2016-10335

In all Android releases from CAF using the Linux kernel, libtomcrypt was updated...

CVE-2016-10338

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

CVE-2014-9960

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API...

CVE-2016-10334

In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...

CVE-2015-9029

In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory...

CVE-2016-10336

In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot...

CVE-2014-9961

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...