In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://source.android.com/security/bulletin/2017-06-01 | vendor advisory |
http://www.securityfocus.com/bid/98874 | third party advisory vdb entry |
http://www.securitytracker.com/id/1038623 | vdb entry |