EUVD-2018-3839

Malware in sbrugna...

Out-of-bounds

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA...

CVE-2018-11847

Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

CVE-2018-11847

CVE-2018-11847: A vulnerability where a malicious TA can tag QSEE kernel memory and map it into EL0, enabling corruption of physical memory and the QSEE kernel, effectively compromising the entire TEE. Affected platforms include Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connect...

CVE-2018-11847

Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...