668 matches found
CVE-2016-10239
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occ...
CVE-2014-9932
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation...
CVE-2014-9937
CVE-2014-9937: Concrete detail from connected sources shows a buffer overflow in TrustZone’s DRM routine in Android, applicable across CAF Linux kernel builds. The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service within TrustZone DRM, via a vulnerabilit...
CVE-2014-9932
CVE-2014-9932 is described across connected sources as an integer overflow in TrustZone, potentially affecting Android on Pixel/Pixel XL devices via CAF/Linux kernel, caused by improper address range computation. The NVD entry notes a TrustZone integer overflow across all CAF Android releases usi...
CVE-2015-9003
In CVE-2015-9003, a cryptographic issue in TrustZone could potentially affect all Android releases from CAF using the Linux kernel. The connected documents identify TrustZone/Android CAF/Linux kernel as the affected area, but do not provide detailed root cause, affected subcomponents, specific vu...
CVE-2015-9002
In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...
CVE-2015-9000
In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...
CVE-2015-9001
Technical details, affected components, and remediation for CVE-2015-9001 are not publicly provided in the connected documents. Monitor updates from NVD/Android sources.
CVE-2015-9002
This CVE concerns Google Android TrustZone, where a DRM routine in the TrustZone DRM path can suffer an out-of-range pointer offset (integer overflow) vulnerability. Connected CNVD entry explicitly states an integer overflow in the TrustZone DRM routine exists on Android, and that an attacker cou...
CVE-2015-8995
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...
CVE-2016-10239
CVE-2016-10239 involves a potential bypass of the TrustZone access control policy in Android CAF builds using the Linux kernel. The description notes improper input validation that could cause an integer overflow, potentially leading to a buffer overflow and a buffer over-read. The NVD entry also...
CVE-2014-9936
CVE-2014-9936 describes a time-of-check time-of-use race condition in TrustZone used during authentication on Android devices that use CAF/Linux kernel. Connected sources indicate the issue affects Android releases prior to 7.0 in TrustZone authentication routines, implying a potential impact to ...
CVE-2014-9935
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...
CVE-2015-8998
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...
CVE-2015-9000
Technical details about CVE-2015-9000 are not publicly available in the provided Connected documents; the description only states a TrustZone untrusted pointer dereference in a DRM routine across CAF Android kernel releases.
CVE-2015-8997
CVE-2015-8997 is described in the Connected documents as a time-of-check time-of-use race condition in the listener routine of TrustZone on Android CAF builds using the Linux kernel. The vulnerability is tied to TrustZone’s listener code, with public sources noting a TOCTOU race condition potenti...
CVE-2015-9001
In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...
CVE-2015-8995
CVE-2015-8995 describes an integer overflow vulnerability in TrustZone that could affect all Android releases from CAF using the Linux kernel. The connected NVD entry attributes this to the TrustZone component, noting potential impacts to confidentiality, integrity, and availability (CVSS base me...