CVE-2017-8239

In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory...

CVE-2017-8240

In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability...

CVE-2014-9964

In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality...

CVE-2015-9032

In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications...

CVE-2016-10338

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

CVE-2016-10334

In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...

CVE-2015-9021

In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled...

CVE-2016-10335

In all Android releases from CAF using the Linux kernel, libtomcrypt was updated...

CVE-2015-9031

CVE-2015-9031 arises in all Android CAF builds that use the Linux kernel, where a TZ memory address is exposed to the high-level OS (HLOS) by the HDCP component. The root cause is a leakage of a TZ memory address, enabling information disclosure within the system. The available documents do not s...

CVE-2015-9025

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application...

CVE-2017-8242

CVE-2017-8242 affects Android CAF releases that use the Linux kernel and involve the Secure Execution Environment (QTEE) driver. The issue is a race condition in the QTEE driver that can lead to an arbitrary memory write. The provided connected sources confirm the vulnerability description but do...

CVE-2016-10341

In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended...

CVE-2017-7369

In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption...

CVE-2017-8240

In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability...

CVE-2017-7369: Improper Input Validation

In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption...

CVE-2017-7373: Double Free

In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver...

CVE-2016-10338: Improper Input Validation

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing...

PT-2017-7869

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue concerns the lack of stack protection for secure applications in Android releases that utilize the Linux kernel from CAF. Recommendations At the moment, there is no information abou...

CVE-2015-9033: Improper Input Validation

In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer...

CVE-2015-9031: Exposure of Sensitive Information to an Unauthorized Actor

In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...