CVE-2015-9071

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall...

Trust Issues: Exploiting TrustZone TEEs

Posted by Gal Beniamini, Project Zero Mobile devices are becoming an increasingly privacy-sensitive platform. Nowadays, devices process a wide range of personal and private information of a sensitive nature, such as biometric identifiers, payment data and cryptographic keys. Additionally, modern...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-18950)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone of Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18943)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Google Android's TrustZone. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-18942)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android's TrustZone. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18947)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the DRM routine of TrustZone for Google Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18946)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the QFPROM routine of TrustZone for Google Android. An attack could exploit the vulnerability to perform unauthorized operations...

Google Android Qualcomm Component Integer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in the DRM routine of TrustZone for Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-18951)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone of Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm Component Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Google Android's TrustZone. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18948)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the authentication routine of TrustZone in versions of Android prior to 7.0. An attack could exploit the vulnerability to perform...

Google Android Qualcomm Component Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the listener routine of TrustZone for Google Android. An attack could exploit this vulnerability to perform unauthorized operations...

Google Android integer overflow vulnerability (CNVD-2017-16015)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone in Android on Pixel and Pixel XL devices. An attacker can exploit this...

Google Android Memory Address Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. The vulnerability can be exploited by an attacker to obtain the TZ memory address...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to resources.

The vulnerability of the TrustZone component in the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

The vulnerability of the TrustZone component in the Android operating system allows a hacker to perform actions that are not intended by the browser interface.

The vulnerability of the TrustZone component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to perform actions that were not intended by the browser interface...

The vulnerability of the TrustZone component in the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to the process’s dynamic memory or cause a service failure.

The vulnerability of the TrustZone component in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the process’s dynamic memory or cause a service failure...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to local files.

The vulnerability of the TrustZone component in the Android operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to gain access to local files...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to information.

The vulnerability of the TrustZone component in the Android operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow a remote attacker to gain access to sensitive information...