806 matches found
Google Pixel Logic Error Vulnerability (CNVD-2025-05455)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a logic error vulnerability that originates from a code logic error in ppcfw.c's ppcfwdenysecdramaccess, which can be exploited by an attacker to cause an arbitrary read from the TEE memory without...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-56187
A logic error in the ppcfw_deny_sec_dram_access function within ppcfw.c of the Google Pixel smartphone allows for an arbitrary read from TEE memory . While some sources state System execution privileges are required, others indicate it can be exploited without such privileges. This vulnerability ...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PT-2025-10611
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A logic error in the code of ppcfw deny sec dram access function in ppcfw.c could lead to a possible arbitrary read from TEE memory. This issue may result in local information disclosure,...
CVE-2024-56187: Out-of-bounds Read
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-306032268
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-46152
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function cleanupshmrefs is called by both entryinvokecommand and entryopensession. The commands...
CVE-2024-21469
Memory corruption when an invoke call and a TEE call are bound for the same trusted application...
PT-2025-13180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the OP-TEE supplicant, a user-space daemon in the Linux kernel, which can become hung, crashed, or killed during an OP-TEE RPC call. This can lead to a system hang-up...
OESA-2024-2293 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race...
ROS-20240909-03
Vulnerability of the opteeregisterdevice function in the drivers/tee/optee/device.c module of the Trusted Execution Environment TEE module of the Linux kernel is related to incorrect processing of the return code. return code. Exploitation of the vulnerability could allow an attacker to cause a...
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2973-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2973-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...
USN-6952-2: Linux kernel (Azure) vulnerabilities
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to...
CVE-2021-46746
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment TEE may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, causing a stack-based buffer overrun, potentially leading to a denial of service...
CVE-2021-46746
CVE-2021-46746 : The AMD ASP/TEE stack protection gap allows a privileged attacker with access to AMD signing keys to corrupt the return address via a stack-based buffer overrun, potentially causing a denial of service. This aligns with AMD’s CVE entry (base score 5.2, local access, high attack c...
CVE-2024-21469
Memory corruption when an invoke call and a TEE call are bound for the same trusted application...
CVE-2024-21469
CVE-2024-21469 is mapped to Qualcomm TZ Secure OS / embedded platform where memory corruption occurs when an invoke call and a TEE call are bound to the same trusted application. The Red Hat/Qualcomm/PT-Security entries describe the issue as memory corruption with potential for arbitrary code exe...
