Aller au contenu
en Se connecter
Non notée

CVE-2020-11221 Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form…

Description

Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Produits et versions touchés

Produit Versions touchées Corrigé en
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Les 33 CVE de Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking →
CVE-2021-35069 Improper validation of data length received from DMA buffer can lead to memory corruption 7.8 Élevée CVE-2021-30266 Possible use after free due to improper memory validation when initializing new interface via Interface add command in… 6.7 Moyenne CVE-2021-1945 Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute,… 7.5 Élevée CVE-2020-11298 While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared… 7.8 Élevée
Suivre cette CVE