76 matches found
CVE-2015-9191
In CVE-2015-9191, the flaw is a NULL pointer/untrusted pointer dereference in a QTEE syscall handler affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 617, SD 650/52, SD 808/...
CVE-2015-9165
CVE-2015-9165 affects Android devices with Qualcomm Snapdragon/related SoCs (IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 400/410/12/615/16/ SD 415/617/650/52/ SD 808/810) where a flaw in the QTEE file service API allows a double-free due to incorrect error handling. The vulnerability ...
The vulnerability of the QTEE service on the Android operating system, found in the CAF repository, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the QTEE service on the Android operating system, found in the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Android CAF-release operating system, related to configuration errors, allows a perpetrator to compromise privacy, integrity, and accessibility.
The vulnerability of the Android CAF-release operating system is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when loading the external application QTEE...
Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26847)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android, whi...
CVE-2016-10388
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application...
Design/Logic Flaw
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application...
Buffer overflow
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service...
CVE-2014-9978
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service...
Code injection
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated...
CVE-2015-9060
In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call...
CVE-2014-9978
CVE-2014-9978 (and related CNVD-2017-25680) describes a buffer overflow in the QTEE service of Qualcomm closed‑source components used by Android CAF/Linux kernels. The vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service within Qualcomm/Android enviro...
CVE-2016-5872
CVE-2016-5872 affects Qualcomm components in Android CAF builds that use the Linux kernel, where arguments to several QTEE syscalls are not properly validated. This could allow a crafted input to impact or compromise the kernel under affected conditions, with the CVSS indicating a high-severity, ...
CVE-2016-10388
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application...
CVE-2014-9978
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service...
CVE-2016-5872
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated...
CVE-2016-10388
Technical details about CVE-2016-10388 are not publicly provided in the connected documents. Monitor for updates.
The vulnerability of the QTEE application for the Android operating system allows a violator to trigger a service failure.
The vulnerability of the QTEE application for the Android operating system is caused by a buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...