Non notée
CVE-2017-18125 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607,…
Description
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon Mobile, Snapdragon Wear | Versions non publiées |
Autres CVE de Snapdragon Mobile, Snapdragon Wear
Les 132 CVE de Snapdragon Mobile, Snapdragon Wear →
CVE-2017-18160
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon…
Non notée
CVE-2018-5880
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon…
Non notée
CVE-2018-11998
While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in…
Non notée
CVE-2018-5881
Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in…
Non notée