67 matches found
Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-29836)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An input validation error vulnerability exists in Samsung mobile devices that originates from a network system or product that does not properly validate incoming data and can be...
Qualcomm User Identity Module Data Compromise
The vulnerability of the Qualcomm User Identity Module component in the Android operating system arises from buffer overflows during the processing of responses from SIM cards. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...
PT-2017-3691
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850 Description: The issue is caused by a buffer overflow when processing a response from the SIM card in the Qualcomm User Identity Module...
USIM Responder Android Data Compromise
The vulnerability of the Android operating system from the CAF repository exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information during the processing of...
Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26834)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An input validation vulnerability exists in the USIM response handling process of the...
Android SIM STK Interception
The vulnerability of the SIM Toolkit component in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept or simulate SIM STK commands using a specially crafted application...
