385 matches found
PT-2018-4677
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to the incorrect configuration of the OCIMEM MPU, which may allow NonSecure Software access to OCIMEM memory used by TZ. This could potentially lead to...
PT-2018-4469
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs when the TZ WV CMD DECRYPT VIDEO function in the Widevine App is called with a size that is too large, potentially leading to an integer overflow. This...
PT-2018-1234
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises due to insufficient validation of input data in the Qualcomm TZ App Handler component of the Android operating system. This could allow a remote attacker to...
PT-2018-1218
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to an error in access control when processing the TZ INFO GET SECURE STATE LEGACY ID command in the Android operating system. This could allow a remote...
PT-2017-3693
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to an out-of-bounds access in the tz assign function, potentially allowing a remote attacker to impact the confidentiality, integrity, and availabilit...
Fedora 26 : coreutils (2017-b17d54561b)
tail: revert to polling if a followed directory is replaced 1283760 ---- - date, touch: fix out-of-bounds write via large TZ variable CVE-2017-7476 ---- - do not obsolete coreutils-single, so it can be installed by DNF2 1444802 Note that Tenable Network Security has extracted the preceding...
Race condition
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
Design/Logic Flaw
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...
CVE-2015-9031
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...
CVE-2015-9022
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
CVE-2015-9031
CVE-2015-9031 arises in all Android CAF builds that use the Linux kernel, where a TZ memory address is exposed to the high-level OS (HLOS) by the HDCP component. The root cause is a leakage of a TZ memory address, enabling information disclosure within the system. The available documents do not s...
CVE-2015-9022: Concurrent Execution using Shared Resource with Improper Synchronization
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
CVE-2015-9031: Exposure of Sensitive Information to an Unauthorized Actor
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP...
Heap overflow
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2017-7476
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2017-7476
Gnulib before 2017-04-26 contains a heap-based buffer overflow in the save_abbr function in time_rz.c triggered by the TZ environment variable. This vulnerability can lead to arbitrary code execution or crash conditions, as described in multiple sources (e.g., CNVD-2017-06995; NVD CVE-2017-7476)....
CVE-2017-7476
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
CVE-2017-7476: Improper Restriction of Operations within the Bounds of a Memory Buffer
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
PT-2017-17760
Name of the Vulnerable Software and Affected Versions Gnulib versions prior to 2017-04-26 Description The issue is related to a heap-based buffer overflow that occurs with the TZ environment variable. The error is specifically located in the save abbr function within the time rz.c file...
