Non notée
CVE-2017-18125 In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607,…
Description
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Snapdragon Mobile, Snapdragon Wear | Versions non publiées |
Autres CVE de Snapdragon Mobile, Snapdragon Wear
Les 132 CVE de Snapdragon Mobile, Snapdragon Wear →
CVE-2018-5879
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon…
Non notée
CVE-2018-5880
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon…
Non notée
CVE-2017-18160
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon…
Non notée
CVE-2018-11284
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of…
Non notée