PT-2017-2740

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to insufficient input validation in the Android CAF build, which can lead to corruption of the Secure File...

PT-2017-2742

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by a buffer overflow in the Inter-RAT procedure of the...

PT-2017-2725

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to insufficient input validation in the Android CAF build, potentially allowing a remote attacker to impac...

PT-2017-2710

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A buffer overflow issue exists in 1x call processing. The exploitation of this issue may allow a remote attacker to cause a...

PT-2017-2726

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by an out-of-bounds array index in the LPP process of th...

PT-2017-2741

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient validation of input data in the Android CAF build, specifically affecting the mink syscall...

PT-2017-2739

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by a buffer over-read in the TrustZone syscall operation...

PT-2017-2743

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Description The issue is related to errors in security settings in the Android CAF build, allowing a remote attacker to impact the confidentiality, integrity, and availability of protected...

PT-2017-2723

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Description The issue is related to resource management errors in the Android CAF build. It may allow a remote attacker to consume an excessive amount of memory when downloading a file. This c...

PT-2017-2744

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Description The issue is related to insufficient access control in the Android CAF build, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability...

CVE-2015-9002

In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

CVE-2015-9001

In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

CVE-2016-10239

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occ...

CVE-2016-10242

A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel...

Information disclosure

In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

Buffer overflow

A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value...

Input validation

Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access...

Buffer overflow

In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

Design/Logic Flaw

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

Buffer overflow

If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application TA in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory...