PT-2017-2117 · Qualcomm+2 · Qualcomm Secure Execution Environment+2
Publicado
2017-05-16
·
Atualizado
2017-07-11
·
CVE-2016-10239
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Qualcomm Secure Execution Environment (affected versions not specified)
Android (all releases from CAF using the Linux kernel)
Description
The issue is caused by an integer overflow, leading to a buffer overflow in memory. This could allow a remote attacker to bypass existing access control policies. The vulnerability may be exploited due to improper input validation.
Recommendations
For Qualcomm Secure Execution Environment, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Android, consider applying configuration changes to restrict access to sensitive areas of the system until a patch is available. Restrict input to prevent improper validation that could lead to integer overflow and subsequent buffer overflow.
Buffer Overflow
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Android
Linux Kernel
Qualcomm Secure Execution Environment