514 matches found
CVE-2018-21052
An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...
CVE-2018-21044
An issue was discovered on Samsung mobile devices with N7.x and O8.0 software. The sem Trustlet has a buffer overflow that leads to arbitrary TEE code execution. The Samsung IDs are SVE-2018-13230, SVE-2018-13231, SVE-2018-13232, SVE-2018-13233 December 2018...
CVE-2019-20589
An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SKPM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14892 August 2019...
CVE-2018-21066
An issue was discovered on Samsung mobile devices with M6.0 Exynos or MediaTek chipsets software. There is a buffer overflow in a Trustlet that can cause memory corruption. The Samsung ID is SVE-2018-11599 July 2018...
CVE-2019-20603
An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...
CVE-2019-20585
An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 August 2019...
CVE-2019-20571
An issue was discovered on Samsung mobile devices with O8.x with TEEGRIS software. There is type confusion in the WVDRM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14885 September 2019...
CVE-2018-21067
An issue was discovered on Samsung mobile devices with M6.0 software. There is an information disclosure in a Trustlet because an address is logged. The Samsung ID is SVE-2018-11600 July 2018...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. The vulnerabilities are in the Keymaster trustlet, SmartManagerCN and FreeType, among others. The vulnerabilities allow a local attacker to run code on the device and execute code with SmartManagerCN privileges. Google reports receiving information tha...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-20937
CVE-2025-20937 describes an out-of-bounds write in the Keymaster trustlet prior to Samsung SMR May-2025 Release 1. The vulnerability enables local privileged attackers to write out-of-bounds memory, potentially causing memory corruption with high impact (confidentiality/ integrity/ availability)....
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
PT-2025-20036 · Unknown · Keymaster Trustlet
Name of the Vulnerable Software and Affected Versions: Keymaster trustlet versions prior to SMR May-2025 Release 1 Description: The issue is an out-of-bounds write in the Keymaster trustlet, allowing local privileged attackers to write out-of-bounds memory. This can be exploited by local privileg...
Confidential Serverless Computing
Although serverless computing offers compelling cost and deployment simplicity advantages, a significant challenge remains in securely managing sensitive data as it flows through the network of ephemeral function executions in serverless computing environments within untrusted clouds. While...