2017

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to caus

An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data

A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file

An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application

Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60

In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due t

In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerabilit

In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are no

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.

In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected

In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera funct

In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writ

In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.

In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading t

In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when

In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading t

In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating po

In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a s

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.

In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.

In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability e

In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystor

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.

In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.

In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.

In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.

In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwr

In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.

In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.

In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.

In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.

In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.

In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.

In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routi

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVi

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVi

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.

In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.

In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in sev

In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the un