EUVD-2016-6300

Malware in sbrugna...

EUVD-2016-9328

Malware in sbrugna...

PT-2017-2134

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment component of the OEM software for Android. This vulnerability can be exploited by...

PT-2017-2132

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment for Android versions affected versions not specified Description The issue exists due to insufficient input validation in the HLOS microprogram component of the Qualcomm Secure Execution Environment for...

PT-2017-2123

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Qualcomm Secure Execution Environment technology, specifically in the TrustZone...

PT-2017-2131

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to incorrect verification of cryptographic signatures in PKCS1 mode. This could allow a remote attacker to elevate their privileges...

PT-2017-2121

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to errors in number processing within the TrustZone technology, specifically in the DRM subroutine of the Qualcomm Secure Execution...

PT-2017-2128

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by a buffer overflow in the TrustZone technology's DRM subroutine of the Qualcomm Secure Execution Environment microprogram for...

PT-2017-2129

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description A time-of-check time-of-use race condition could potentially exist in an authentication routine in TrustZone. This issue is caused by synchronization errors when using a shared...

PT-2017-2127

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is caused by an integer overflow in the Qualcomm Secure Execution Environment microprogram technology for Android from the CAF repository. Thi...

PT-2017-2117

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment affected versions not specified Android all releases from CAF using the Linux kernel Description The issue is caused by an integer overflow, leading to a buffer overflow in memory. This could allow a remot...

PT-2017-2124

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the Linux kernel Description The issue is related to an integer overflow vulnerability in TrustZone technology, specifically in the Qualcomm Secure Execution Environment microprogram software for Android from th...

CVE-2017-0614

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2017-0612: Allocation of Resources Without Limits or Throttling

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

PT-2017-2169

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to insufficient access control in the Qualcomm Secure Execution Environment Communicator driver of the Android operating system. Exploitation of this issue could allow a remote...

PT-2017-2167

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description An elevation of privilege issue in the Qualcomm Secure Execution Environment Communicator driver could allow a local malicious application to execute arbitrary code within the contex...

CVE-2017-0613: Improper Input Validation

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

PT-2017-2168

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An elevation of privilege issue in the Qualcomm Secure Execution Environment Communicator driver could allow a local malicious application to execute arbitrary code within the context of th...

CVE-2017-0614: Buffer Copy without Checking Size of Input

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

Google Android Qualcomm Secure Execution Environment Communicator Driver elevation of privilege vulnerability (CNVD-2017-07361)

Android on Nexus 5X, etc. is an open source Linux-based operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA.The Qualcomm Secure Execution Environment QSE is an interface used to provide communication between the user space and the Qualcomm...