Non notée
CVE-2017-18141 When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which…
Description
When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear | Versions non publiées |
Autres CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Les 123 CVE de Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear →
CVE-2018-11999
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and…
Non notée
CVE-2018-5915
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear…
Non notée
CVE-2018-5867
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and…
Non notée
CVE-2018-11288
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside…
Non notée