|
267711
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2015-9005
|
2024-11-21 11:39 |
2017-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267712
|
9.8 |
CRITICAL
Network
|
picocom_project
|
picocom
|
picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.
|
CWE-77
Command Injection
|
CVE-2015-9059
|
2024-11-21 11:39 |
2017-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267713
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.
|
CWE-310
Cryptographic Issues
|
CVE-2015-9003
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267714
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
|
CWE-189
Numeric Errors
|
CVE-2015-9002
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267715
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
|
CWE-200
Information Exposure
|
CVE-2015-9001
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267716
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
|
CWE-476
NULL Pointer Dereference
|
CVE-2015-9000
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267717
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8999
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267718
|
7.8 |
HIGH
Local
|
google
|
android
|
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2015-8998
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267719
|
7.0 |
HIGH
Local
|
google
|
android
|
In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.
|
CWE-362
Race Condition
|
CVE-2015-8997
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267720
|
7.0 |
HIGH
Local
|
google
|
android
|
In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.
|
CWE-362
Race Condition
|
CVE-2015-8996
|
2024-11-21 11:39 |
2017-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|