Samsung Galaxy S3 code issue vulnerability

Samsung Galaxy S22 is a smartphone product released on February 9, 2022 by Samsung. The Samsung Galaxy S22 StrongBox suffers from a State Maintenance Error vulnerability that stems from incorrect StrongBox state maintenance. An attacker can exploit the vulnerability to change the Android ROT duri...

CVE-2022-28793: Improper Check for Unusual or Exceptional Conditions

Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time...

com.schibsted.security:strongbox-sdk (0.4.0) potentially affected by CVE-2020-8897 via com.amazonaws:aws-encryption-sdk-java (0.0.1)

com.amazonaws:aws-encryption-sdk-java MAVEN version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazonaws:aws-encryption-sdk-java and may be impacted: - com.schibsted.security:strongbox-sdk 0.4.0 Source cves: CVE-2020-8897 Source advisory...

com.schibsted.security:strongbox-sdk (0.4.0) potentially affected by CVE-2024-23680 via com.amazonaws:aws-encryption-sdk-java (0.0.1)

com.amazonaws:aws-encryption-sdk-java MAVEN version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazonaws:aws-encryption-sdk-java and may be impacted: - com.schibsted.security:strongbox-sdk 0.4.0 Source cves: CVE-2024-23680 Source advisor...

CVE-2019-9253

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9253

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

Information disclosure

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9253

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9253: Insecure Storage of Sensitive Information

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

PT-2019-19475

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible storage issue in KeyStore allows symmetric keys to be stored in the Trusted Execution Environment TEE instead of the strongbox due to a missing strongbox flag. This could lead to local...

Easy MP3 Downloader 4.7.8.8 - (Unlock Code) Denial of Service Exploit

!/usr/bin/python SWAMI KARUPASAMI THUNAI print""" Exploit Title: Easy MP3 Downloader Denial of Service Date: 2019-08-29 Exploit Author: Mohan Ravichandran & Snazzy Sanoj Organization : StrongBox IT Vulnerable Software: Easy MP3 Downloader Version: 4.7.8.8 Software Link:...

Easy MP3 Downloader 4.7.8.8 - Unlock Code Denial of Service

Easy MP3 Downloader 4.7.8.8 - Unlock Code Denial of Service !/usr/bin/python SWAMI KARUPASAMI THUNAI print""" Exploit Title: Easy MP3 Downloader Denial of Service Date: 2019-08-29 Exploit Author: Mohan Ravichandran & Snazzy Sanoj Organization : StrongBox IT Vulnerable Software: Easy MP3 Downloade...