CVE-2016-10239
HIGHAndroid - Buffer Overflow and Buffer Over-Read via TrustZone Access Control Policy Bypass
Title source: llmDescription
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-04-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/97334
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1038201
Scores
CVSS v3
7.8
EPSS
0.0006
EPSS Percentile
19.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
CWE-190
Status
published
Products (2)
google/android
Qualcomm, Inc./All Qualcomm Products
All Android releases from CAF using the Linux kernel
Published
May 16, 2017
Tracked Since
Feb 18, 2026