Lucene search
+L

131 matches found

Cvelist
Cvelist
added 2022/10/13 12:0 a.m.35 views

CVE-2022-42902

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

9.1AI score0.01259EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/01/13 12:0 a.m.5 views

Linaro Trusted Firmware-M 安全漏洞

Linaro Trusted Firmware-M Tf-M is a reference implementation of the Platform Security Architecture Psa IoT security framework from Linaro. A security vulnerability exists in Linaro Trusted Firmware-M TF-M, which stems from Trusted Firmware-M TF-M 1.4.0, where access control is incorrect when...

5.9CVSS6AI score0.01194EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/11 3:15 p.m.6 views

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

9.1CVSS5.5AI score0.00868EPSS
SaveExploits0References2
NVD
NVD
added 2021/08/11 3:15 p.m.26 views

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

9.1CVSS0.00868EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/11 3:15 p.m.21 views

Information disclosure

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

6.4CVSS9AI score0.00868EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/08/11 2:59 p.m.27 views

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

9.2AI score0.00868EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/11 2:59 p.m.66 views

CVE-2019-25052

The CVE-2019-25052 issue affects Linaro OP-TEE up to versions before 3.7.0. Root cause: processing inconsistent or malformed data allows calling update and final cryptographic functions directly. Impact: a crash that could leak sensitive information. Exploitation details or in-the-wild usage are ...

9.1CVSS9AI score0.00868EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/08/11 2:59 p.m.46 views

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

9.1CVSS9.2AI score0.00868EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/08/11 12:0 a.m.9 views

PT-2021-9102

Name of the Vulnerable Software and Affected Versions Linaro OP-TEE versions prior to 3.7.0 Description The issue allows an attacker to call update and final cryptographic functions directly by using inconsistent or malformed data, potentially causing a crash that could leak sensitive information...

9.1CVSS7.7AI score0.00868EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/08/11 12:0 a.m.5 views

Linaro OP-TEE 加密问题漏洞

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in Linaro OP-TEE, which originated in Linaro OP-TEE prior to 3.7.0, where it is possible to cause a crash by directly calling the update and final cryptographic functions through the use ...

9.1CVSS8.4AI score0.00868EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/07/18 12:0 a.m.4 views

Linaro OP-TEE Memory Corruption Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE versions prior to 3.4.0. An attacker could exploit this vulnerability to corrupt memory...

9.8CVSS6.9AI score0.0154EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.6 views

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23142)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

10CVSS7.4AI score0.02777EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.6 views

Linaro OP-TEE Input Validation Error Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. An attacker could exploit this vulnerability to cause TEE memory corruption...

9.8CVSS6.9AI score0.0154EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.5 views

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23064)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

9.8CVSS7.4AI score0.01616EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.9 views

Linaro OP-TEE Digit Error Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A security vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. An attacker could exploit this vulnerability to disclose passwords and/or data from a previous Trusted Application...

7.5CVSS6.8AI score0.01408EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/17 12:0 a.m.5 views

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-22865)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

10CVSS7.4AI score0.02723EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/16 2:15 p.m.33 views

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

9.8CVSS9.6AI score0.0154EPSS
SaveExploits0References1
CVE
CVE
added 2019/07/16 1:18 p.m.100 views

CVE-2019-1010292

CVE-2019-1010292 affects Linaro/OP-TEE OP-TEE (optee_os). The vulnerability is in boundary checks, which could lead to corruption of any memory the TA can access. Impact: memory corruption within TA-accessible memory. Fixed in: v3.4.0. CVSS (NVD v3.0): 9.8 (CRITICAL), network-attack vector, low c...

9.8CVSS9.5AI score0.0154EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/07/16 1:18 p.m.28 views

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

9.7AI score0.0154EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2019/07/16 1:18 p.m.55 views

CVE-2019-1010292

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: opteeos. The fixed version is: v3.4.0...

9.8CVSS9.8AI score0.0154EPSS
SaveExploits0
Rows per page
Query Builder