Security Vulnerabilities
- CVEs Published In June 2017
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.
In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.
In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.
In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.