383 matches found
widevine-l3-decryptor
非推奨の警告 このリポジトリには、かつて Windows マシンの Chrome 上で Widevine L3 DRM を回避するコードが含まれていました。 2021年5月31日以降、動作しなくなりましたが、リバースエンジニアリングの解説を読むことはできます。 更新 Google は、このリポジトリのほとんどのフォークに対して DMCA 削除要請を発行しました。当時のリポジトリのオリジナルコンテンツは以下にアーカイブされています。 Widevine L3 Decryptor Widevine は Google 所有の DRM システムであり、Netflix や Spotify...
widevine-l3-decryptor
Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...
CVE-2021-1961
针对 CVE-2021-1961 的利用代码。完整的技术文章请查阅我的博客。 要构建该利用代码,请运行 Android NDK 的 ndk-build。 要运行该利用代码,你需要有 /dev/qseecom 的访问权限,这意味着需要正确的用户/组以及正确的 SELinux 上下文。这可以通过在调试镜像上使用命令 su system 完成,或者在使用 Magisk 修补过的原厂镜像上使用命令 su - system 完成。 以下是在使用 Magisk 修补过的原厂镜像上运行该利用代码的示例: $ adb push qseecomexploit /data/local/tmp $ adb...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
UBUNTU-CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967
OP-TEE OS 4.10.0 contains a null pointer dereference in the Widevine PTA open_session handler. When CFG_WIDEVINE_PTA is enabled, Normal World clients can trigger an unconditional NULL dereference via is_user_ta_ctx(), crashing the TEE at S-EL1 and causing a Denial of Service. The issue is fixed i...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
EUVD-2026-55696
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
PT-2026-69901
Name of the Vulnerable Software and Affected Versions OP-TEE OS versions prior to 4.10.0 commit 0aadfc2 Description A null pointer dereference occurs in the Widevine pseudo-TA open session handler when CFG WIDEVINE PTA is enabled. Normal World clients can trigger this by opening a session directl...
CVE-2026-71967: NULL Pointer Dereference
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
Linux Distros Unpatched Vulnerability : CVE-2026-71967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows...
CVE-2021-0592
In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...
CVE-2020-10836
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...