PT-2023-15714 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 7.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the PRDiagVerifyProvisioning function. Recommendations: For versions 5.0.0 through 7.1.1,...

CVE-2022-48335: Integer Overflow or Wraparound

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 7.1.1 that stems from an integer overflow in PRDiagParseAndStoreData...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in Widevine Trusted Application versions 5.0.0 through 5.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

CVE-2022-48478

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service...

CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

Cross site scripting

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

CVE-2023-30639: Improper Neutralization of Input During Web Page Generation

Archer Platform 6.8 before 6.12 P6 HF1 6.12.0.6.1 contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 6.11.0.4 is also a fixed release...

CVE-2022-33225

Memory corruption due to use after free in trusted application environment...

Memory corruption

Memory corruption due to use after free in trusted application environment...

CVE-2022-33225

CVE-2022-33225 is a memory corruption due to use-after-free in a trusted application environment. Public Red Hat and NVD entries corroborate memory-corruption impact; the vulnerability is linked to Qualcomm components (bootloader/trusted environment). The Pixel bulletin lists CVE-2022-33225 under...

CVE-2022-33225 Use after free in Trusted Application Environment

Memory corruption due to use after free in trusted application environment...

CVE-2022-33225 Use after free in Trusted Application Environment

Memory corruption due to use after free in trusted application environment...

PT-2023-13247 · Unknown · Trusted Application Environment

Name of the Vulnerable Software and Affected Versions: Trusted Application Environment affected versions not specified Description: The issue is related to memory corruption due to use after free in the trusted application environment. Recommendations: At the moment, there is no information about...

CVE-2021-26391

A flaw was found in hw. Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. Mitigation Please contact AMD for more updates on this flaw...

CVE-2021-26391

Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

CVE-2021-26391

Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...

Authorization

Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...