CVE-2015-9033: Improper Input Validation

In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer...

CVE-2015-9025: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application...

CVE-2017-8242: Concurrent Execution using Shared Resource with Improper Synchronization

In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write...

PT-2017-18230

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A race condition exists in a QTEE driver in the Linux kernel used by Android releases from CAF, potentially leading to an arbitrary memory write. Recommendations At the moment, there is no...

CVE-2015-9024

In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications...

PT-2017-2708

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a buffer overflow vulnerability in the QTEE service of the Android operating system from the CAF repository. This vulnerability can be exploited by a remote attacker t...

PT-2016-3157

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient validation of input data in the Android CAF build, specifically affecting arguments to...