PatchTheCVEtrusted application vulnerabilities and fixes
Recent CVEs affecting trusted application, with upgrade or downgrade steps. 6 tracked.
Also searched as: trustedapplication.
trusted application has 6 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 6. Most recent: 2023-06-26. Highest priority: CVE-2022-48336 (score 61/100).
- CVE-2022-48336 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resul
- CVE-2022-48335 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resu
- CVE-2022-48334 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer ov
- CVE-2022-48333 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len intege
- CVE-2022-48332 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and r
- CVE-2022-48331 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow an
FAQ
How do I fix trusted application vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is trusted application being exploited right now?
None of the tracked trusted application CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which trusted application CVE should I patch first?
CVE-2022-48336 currently ranks highest (61/100): Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resul.