Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8985 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T08:36:31.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392 - http://www.securityfocus.com/bid/76916 - https://security.gentoo.org/glsa/201908-06
CVE ID: CVE-2015-8986 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.678Z Vendors: Intel Products: Advanced Threat Defense (MATD) Problem Types: Sandbox detection evasion vulnerability Description: Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (MATD) 3.4.2.32 and earlier allows attackers to detect the sandbox environment, then bypass proper malware detection resulting in failure to detect a malware file (false-negative) via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10096
CVE ID: CVE-2015-8987 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:30.829Z Vendors: Intel Products: Agent (MA) Problem Types: Man-in-the-middle (MitM) attack vulnerability Description: Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10101
CVE ID: CVE-2015-8988 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.576Z Vendors: Intel Products: ePO Deep Command (eDC) Problem Types: Unquoted executable path vulnerability Description: Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10115
CVE ID: CVE-2015-8989 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.043Z Vendors: Intel Products: McAfee Vulnerability Manager (MVM) Problem Types: Unsalted password vulnerability Description: Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10117
CVE ID: CVE-2015-8990 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:30.936Z Vendors: Intel Products: Advanced Threat Defense (ATD) Problem Types: Detection bypass vulnerability Description: Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10127
CVE ID: CVE-2015-8991 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.656Z Vendors: Intel Products: McAfee Security Scan+ (MSS+) Problem Types: Malicious file execution vulnerability Description: Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462
CVE ID: CVE-2015-8992 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.159Z Vendors: Intel Products: WebAdvisor Problem Types: Malicious file execution vulnerability Description: Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462
CVE ID: CVE-2015-8993 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T08:36:31.150Z Vendors: Intel Products: CloudAV (Beta) Problem Types: Malicious file execution vulnerability Description: Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462
CVE ID: CVE-2015-8994 State: PUBLISHED Published: 2017-03-02T06:00:00 Last Updated: 2024-08-06T08:36:31.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validate_permission=1 setting. The vulnerability details are as follows. In PHP SAPIs where PHP interpreters share a common parent process, Zend OpCache creates a shared memory object owned by the common parent during initialization. Child PHP processes inherit the SHM descriptor, using it
emory object owned by the common parent during initialization. Child PHP processes inherit the SHM descriptor, using it to cache and retrieve compiled script bytecode ("opcode" in PHP jargon). Cache keys vary depending on configuration, but filename is a central key component, and compiled opcode can generally be run if a script's filename is known or can be guessed. Many common shared-hosting configurations change EUID in child processes to enforce privilege separation among hosted users (for example using mod_ruid2 for the Apache HTTP Server, or php-fpm user settings). In these scenarios, the default Zend OpCache behavior defeats script file permissions by sharing a single SHM cache among
these scenarios, the default Zend OpCache behavior defeats script file permissions by sharing a single SHM cache among all child PHP processes. PHP scripts often contain sensitive information: Think of CMS configurations where reading or running another user's script usually means gaining privileges to the CMS database. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/02/28/1 - http://seclists.org/oss-sec/2017/q1/520 - http://marc.info/?l=php-internals&m=147921016724565&w=2 - https://ma.ttias.be/a-better-way-to-run-php-fpm/ - http://marc.info/?l=php-internals&m=147876797317925&w=2 - http://seclists.org/oss-sec/2016/q4/343 - https:/
n-php-fpm/ - http://marc.info/?l=php-internals&m=147876797317925&w=2 - http://seclists.org/oss-sec/2016/q4/343 - https://bugs.php.net/bug.php?id=69090
CVE ID: CVE-2015-8995 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.088Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Integer Overflow Vulnerability in TrustZone Description: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-8996 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.338Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Time-of-check Time-of-use Race Condition in TrustZone Description: In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-8997 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:30.987Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Time-of-check Time-of-use Race Condition in TrustZone Description: In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-8998 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.259Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Integer Overflow Vulnerability in TrustZone Description: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-8999 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.537Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Buffer Overflow Vulnerability in TrustZone Description: In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-9000 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.285Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Untrusted Pointer Dereference in TrustZone Description: In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-9001 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:30.971Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Information Exposure Vulnerability in TrustZone Description: In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-9002 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.800Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Use of Out-of-range Pointer Offset in TrustZone Description: In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-9003 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T08:36:31.025Z Vendors: Qualcomm, Inc. Products: All Qualcomm Products Problem Types: Cryptographic Issues in TrustZone Description: In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/97329 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2015-9004 State: PUBLISHED Published: 2017-05-02T21:00:00 Last Updated: 2024-08-06T08:36:31.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - https://github.com/torvalds/linux/commit/c3c87e770458aa004bd7ed3f29945ff436fd6511 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c3c87e770458aa004bd7ed3f29945ff436
436fd6511 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c3c87e770458aa004bd7ed3f29945ff436fd6511 - http://www.securityfocus.com/bid/98166
CVE ID: CVE-2015-9005 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T08:36:31.699Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow to Buffer Overflow Vulnerability in TrustZone Description: In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98322
CVE ID: CVE-2015-9006 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T08:36:31.364Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control Vulnerability in Resource Power Manager Description: In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98321
CVE ID: CVE-2015-9007 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-06T08:36:31.609Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Double Free Vulnerability in TrustZone Description: In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-05-01 - http://www.securityfocus.com/bid/98324
CVE ID: CVE-2015-9008 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T04:25:19.563Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9009 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T23:15:41.752Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9010 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T21:07:23.381Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9011 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T01:16:23.097Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9012 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T18:08:34.662Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9013 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T03:43:25.908Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9014 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T22:03:32.709Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9015 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T23:56:22.560Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9016 State: PUBLISHED Published: 2018-04-05T18:00:00Z Last Updated: 2024-09-17T04:28:55.719Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://github.com/torvalds/linux/commit/0048b4837affd153897ed1222283492070027aa9 - h
ebian.org/security/2018/dsa-4187 - https://github.com/torvalds/linux/commit/0048b4837affd153897ed1222283492070027aa9 - https://source.android.com/security/bulletin/2018-02-01
CVE ID: CVE-2015-9019 State: PUBLISHED Published: 2017-04-05T21:00:00Z Last Updated: 2024-09-16T22:56:40.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=934119 - https://bugzilla.gnome.org/show_bug.cgi?id=758400
CVE ID: CVE-2015-9020 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T08:36:31.496Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Untrusted Pointer Dereference Vulnerability in TrustZone Description: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9021 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T08:36:31.802Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control Vulnerability in TrustZone Description: In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9022 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T08:36:31.795Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-check Time-of-use (TOCTOU) Race Conditions in TrustZone Description: In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9023 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T08:36:31.644Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2015-9024 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T08:36:31.761Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control Vulnerability in TrustZone Description: In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623