ExtractKeyMaster

ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431...

Lenovo-Qcom-RPMB-PoC

Lenovo Qcom RPMB Tool !CAUTION Prerequisites : Python 3.12 64-bit must be installed on your Windows system and added to PATH before running this tool. The bundled offline dependencies and Qualcomm EDL communication rely on Python 3.12. !IMPORTANT Device Compatibility Notice : This tool is strictl...

EUVD-2026-122710

In kmreaddataresponse of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.8), org.apache.syncope.core:syncope-core-persistence-jpa-json (>=3.0.0-m0, <=3.0.16) +7 more potentially affected by CVE-2026-114364 via org.apache.syncope.core:syncope-core-persistence-jpa (>=3.0.0-m0, <=4.0.8)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.8 Source cves: CVE-2026-114364 Source advisory: MEND:CVE-2026-114364...

CVE-2026-21085

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21085

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21085

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

EUVD-2026-74626

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21085

CVE-2026-21085 is an out-of-bounds write in the Keymaster trustlet on Samsung mobile devices, prior to the SMR Sep-2026 Release 1 . A local privileged attacker can write out-of-bounds memory, potentially leading to significant compromise of confidentiality, integrity, and availability of the vuln...

CVE-2026-21085: Out-of-bounds Write

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

PT-2026-88819

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.6), org.apache.syncope.core:syncope-core-persistence-jpa-json (>=3.0.0-m0, <=3.0.16) +7 more potentially affected by CVE-2026-57308 via org.apache.syncope.core:syncope-core-persistence-jpa (>=3.0.0-m0, <=4.0.6)

org.apache.syncope.core:syncope-core-persistence-jpa MAVEN version =3.0.0-m0, =4.0.2, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6, =3.0.0-m0, =4.0.6 Source cves: CVE-2026-57308 Source advisory: SNYK:JAVA-ORGAPACHESYNCOPECORE-19352541...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.1.0-m0, <=4.1.1), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.1.0-m0, <=4.1.1) +4 more potentially affected by CVE-2026-62183 via org.apache.syncope.core:syncope-core-workflow-java (>=4.1.0-m0, <=4.1.1)

org.apache.syncope.core:syncope-core-workflow-java MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.1 Source cves: CVE-2026-62183 Source advisory: MEND:CVE-2026-62183...

org.apache.syncope.core:syncope-core-metrics-starter (>=4.0.2, <=4.0.6), org.apache.syncope.core:syncope-core-self-keymaster-starter (>=4.0.0-m0, <=4.0.6) +4 more potentially affected by CVE-2026-62183 via org.apache.syncope.core:syncope-core-workflow-java (>=4.0.0-m0, <=4.0.6)

org.apache.syncope.core:syncope-core-workflow-java MAVEN version =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.6 Source cves: CVE-2026-62183 Source advisory: MEND:CVE-2026-62183...

CVE-2026-21046

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21046

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21046

The vulnerability CVE-2026-21046 concerns the fabricKeymaster trustlet. It describes a time-of-check time-of-use race condition that exists prior to the SMR Jul-2026 Release 1. Impact is local: a privileged attacker could execute arbitrary code. The provided sources specify the affected component...

CVE-2026-21046

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code...

EUVD-2026-42817

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code...

PT-2026-57088

Name of the Vulnerable Software and Affected Versions fabricKeymaster trustlet versions prior to SMR Jul-2026 Release 1 Description A Time-of-check time-of-use TOCTOU race condition exists in the fabricKeymaster trustlet. This occurs when a program checks the state of a resource before using it,...