Vulnerability: TrustZone Kernel Memory Region Verification Bypass on Motorola Devices

CVE-2013-3051 · MEDIUM Severity

AV:L/AC:H/AU:N/C:C/I:C/A:C

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.

Learn more about our Cis Benchmark Audit For Google Android.