CVE Catalog

CVE-2016-10239

High
Published: Translated: NVD NIST

Summary

The TrustZone access control policy in Android may be bypassed due to improper input validation, potentially leading to a buffer overflow and buffer over-read vulnerabilities.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data and the possibility of executing malicious code, which could lead to serious security breaches.

Recommendation

It is recommended to update Android systems to the latest versions that address this vulnerability and implement additional security measures to protect against potential attacks.

Other vulnerabilities in TrustZone w systemie Android

Original NVD description (English source)

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS