In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera expects those buffers to contain data captured during the current camera session. It is possible though for HLOS to put aside and reuse one or more of the protected buffers with previously captured data during next camera session. Such data reuse must be prevented as the TEE applications expects to receive valid data captured during the current session only.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
qualcomm mdm9206_firmware - |
||
qualcomm mdm9607_firmware - |
||
qualcomm mdm9650_firmware - |
||
qualcomm sd_210_firmware - |
||
qualcomm sd_212_firmware - |
||
qualcomm sd_205_firmware - |
||
qualcomm sd_835_firmware - |
||
qualcomm sd_845_firmware - |
||
qualcomm sd_850_firmware - |
Vulmon