PT-2017-3665

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to the Qualcomm Trusted Execution Environment component in the Android operating system, which is associated with incorrect ECDSA cryptographic...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

CVE-2017-8142

CVE-2017-8142 affects Huawei Mate 9 and Mate 9 Pro devices, where the TEE module driver is vulnerable to a Use-After-Free (UAF). The issue occurs on software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221. An attacker can entice a user to install a malicious app that spawns multiple ...

PT-2017-3695

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to the Qualcomm Trusted Execution Environment component in the Android operating system, specifically concerning insufficient access control when usin...

PT-2017-3693

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to an out-of-bounds access in the tz assign function, potentially allowing a remote attacker to impact the confidentiality, integrity, and availabilit...

PT-2017-3417

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Android versions prior to the fixed version QRD Android versions prior to the fixed version Description The issue is related to insufficient input validation in the message passing interface ...

PT-2017-3699

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: A Use After Free condition can occur in a communication API, related to the Qualcomm Trusted Execution Environment component in the Android operating system. This issue is...

The vulnerability of the Android operating system lies in its lack of access control during user authentication. This allows attackers to replicate previously intercepted responses and use the Trusted Execution Environment (TEE) without being detected.

The vulnerability of the Android operating system is related to deficiencies in access control during user authentication. Exploiting this vulnerability allows a malicious actor to utilize the Trusted Execution Environment TEE without verifying the authenticity of the environment, and to replicat...

CVE-2016-10398

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

CVE-2016-10398

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

Authentication flaw

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

CVE-2016-10398: Undefined Security Weakness

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

CVE-2016-10398

Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system arises from the existence of elevated privileges for external components of the TEE. Exploiting this vulnerability allows a malicious actor, operating remotely, to enhance their privileges...

Huawei Mobile TEE Module Use After Free Vulnerability

The Mate 9 and Mate 9 Pro are a smartphone from Huawei China. Trusted Execution Environment TEE is a secure area on the main processor of a mobile device The Huawei Mate 9 and Mate 9 Pro phones have an Use After Free UAF security vulnerability in the TEE module. An attacker induces a user to...

PT-2017-3664

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: An access control issue exists in the Core of Android, related to the Qualcomm Trusted Execution Environment component. This issue is associated with inadequate access...

PT-2017-3698

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to a debug policy bypass in Android, specifically affecting Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/S...

The vulnerability of the Android operating system, which allows a hacker to trigger a buffer overflow.

The vulnerability in the trusted execution environment of Android’s operating system’s access control API arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a buffer overflow due to lack of size checking for the buffer...

Two CVE case study: how to use Android in the trusted zone-vulnerability warning-the black bar safety net

This article from the actual departure, about how to step by step use of Android in the trusted zone TrustZone on. Here I am using a Huawei hisilicon the Trusted Execution Environment Trusted Execution Environment, TEE on. First of all, I found one can gain kernel privilege vulnerabilities, and...