PT-2023-19827 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core due to secure memory access by a user while loading a modem image. Recommendations: At the moment, there is no information about a newer versi...

SUSE CVE-2017-9526

In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key from side-channel observation during the signing process can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point...

CVE-2021-46851

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...

PT-2022-12943 · Unknown · Drm Module

Name of the Vulnerable Software and Affected Versions: DRM module affected versions not specified Description: The issue is related to a problem in the DRM module's verification of secure memory attributes. This could potentially lead to abnormal video playback if exploited. Recommendations: At t...

CVE-2021-46851: Improper Access Control

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...

CVE-2021-46851

The CVE-2021-46851 entry concerns a vulnerability in the DRM module of Huawei HarmonyOS where verification of secure memory attributes can fail, potentially leading to abnormal video playback. Public sources consistently describe the DRM module as affected and the impact as a video playback anoma...

CVE-2021-46851

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...

CVE-2021-46851

The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback...

CVE-2022-39854

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

CVE-2022-39854

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

CVE-2022-39854

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

Input validation

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

CVE-2022-39854

CVE-2022-39854 pertains to Samsung devices with the IOMMU in the SMR Oct-2022 Release 1, where improper protection in the IOMMU could allow unauthorized access to secure memory. The root cause is described as insufficient protection in IOMMU prior to the SMR Oct-2022 Release 1. Affected remediati...

CVE-2022-39854

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2022 Release 1 version, which stems from improper protection in the IOMMU...

CVE-2022-39854: Improper Access Control

Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory...

PT-2022-25044 · Iommu · Iommu

Name of the Vulnerable Software and Affected Versions: IOMMU versions prior to SMR Oct-2022 Release 1 Description: The issue is related to improper protection in IOMMU, allowing unauthorized access to secure memory. Recommendations: For versions prior to SMR Oct-2022 Release 1, update to SMR...

CVE-2022-40246

A potential attacker can write one byte by arbitrary address at the time of the PEI phase only during S3 resume boot mode and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines V...

CVE-2022-20182

In handleramdump of pixelloader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14412 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the handle ramdump function of pixel loader.c, which could allow the creation of a ramdump of non-secure memory. This may lead to local information disclosure,...