Description (CNA)
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qualcomm, Inc. / All Qualcomm Products | affected All Android releases from CAF using the Linux kernel |
CWE
No CWE identifiers supplied.
References
- https://source.android.com/security/bulletin/2017-04-01
- http://www.securityfocus.com/bid/97334
- http://www.securitytracker.com/id/1038201
ADP enrichment
No English description supplied.