EUVD-2016-4944

Malware in sbrugna...

PT-2019-6294

Name of the Vulnerable Software and Affected Versions Qualcomm QSEE microprogram software versions affected versions not specified Description The issue is related to a buffer copy without input size validation in the logging mechanism of Qualcomm's QSEE microprogram software. This could allow an...

Google Android Buffer Overflow Vulnerability (CNVD-2018-08829)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A buffer overflow vulnerability exists in the Qualcomm...

Trust Issues: Exploiting TrustZone TEEs

Posted by Gal Beniamini, Project Zero Mobile devices are becoming an increasingly privacy-sensitive platform. Nowadays, devices process a wide range of personal and private information of a sensitive nature, such as biometric identifiers, payment data and cryptographic keys. Additionally, modern...

PT-2017-2118

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a page alignment problem in the Qualcomm Secure Execution Environment QSEE for Android, which may allow an attacker to bypass access control. This could potentially...

CVE-2016-3931: Undefined Security Weakness

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418...