CVE-2015-9201

CVE-2015-9201 describes an integer overflow in tzbsp that can lead to privilege escalation on multiple Qualcomm Snapdragon/Android platforms (Automotive, Mobile, Wear, and related SoCs). The affected components and devices span Qualcomm’s tzbsp-related code paths used in Snapdragon lines (e.g., I...

PT-2018-4541

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue arises from the function tzbsp pil verify sig not strictly checking if the pointer to ELF and program headers and hash segment is within secure memory. It only verifies that the addres...

PT-2018-4529

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by improper input validation in tzbsp ocmem, which can lead to privilege escalation. This affects Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055,...

PT-2018-4534

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to an integer overflow in tzbsp, which can lead to privilege escalation. This affects various Qualcomm Snapdragon products, including Automobile, Mobile...

CVE-2015-9201: Integer Overflow or Wraparound

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 60...