NetSight
high7.2

CVE-2021-25500

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.

Impact

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0

Weakness classification

References