Integer overflow

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

Integer overflow

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

CVE-2017-6292

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

CVE-2017-6292

Summary: CVE-2017-6292 is an integer overflow in NVIDIA TLZ TrustZone’s TA-to-TA communication handler that can cause an out-of-bounds write, potentially enabling local code execution or denial of service within TrustZone. Affected: NVIDIA TLZ TrustZone OS components on Android devices (notably S...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6292

In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to local escalation of privilege in the TrustZone with no additional execution privileges needed. User interaction is not needed for...

CVE-2017-6290

CVE-2017-6290 affects NVIDIA TLK TrustZone in Tegra on SHIELD TV. It describes a potential local escalation of privilege via an out-of-bounds write caused by an integer overflow, with no user interaction required. NVIDIA’s bulletin redirects to Android patching: affected SHIELD TV platforms requi...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-13161)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component TLK TrustZone. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-12655)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component TLZ TrustZone. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android has an unspecified vulnerability (CNVD-2018-10121)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm FSM9055 and other central processing unit CPU products from Qualcomm for different platforms. A security vulnerability exists in the Qualcomm closed-source component ...

CVE-2015-9200

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, and SD 835, in some TrustZone API functions, untrusted pointers can be dereferenced...

Null pointer dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, and SD 835, in some TrustZone API functions, untrusted pointers can be dereferenced...

CVE-2015-9200

CVE-2015-9200 affects Android devices running on Qualcomm Snapdragon SoCs where, prior to patch level 2018-04-05, TrustZone API functions could dereference untrusted pointers. The vulnerability exposes potential remote impact due to network-exposed conditions, with a propagation path dependent on...

CVE-2015-9200

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, and SD 835, in some TrustZone API functions, untrusted pointers can be dereferenced...

NVIDIA SHIELD TV TrustZone Software DRM Application Elevation of Privilege Vulnerability

NVIDIA SHIELD TV is a gaming console device from NVIDIA Corporation.TrustZone Software is one of the system-wide security software.DRM application is one of the digital rights management applications. A security vulnerability exists in the DRM application of TrustZone Software in NVIDIA SHIELD TV...

NVIDIA SHIELD TV TrustZone Software Denial of Service Vulnerability

The NVIDIA SHIELD TV is a gaming console device from NVIDIA, U.S.A. TrustZone Software is one of the system-wide security software.... A security vulnerability exists in the Keymaster implementation of TrustZone Software in NVIDIA SHIELD TV SE 6.2 and earlier. An attacker could exploit this...

CVE-2017-6296

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...

CVE-2017-6296

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...

Information disclosure

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high...