Google Android on Qualcomm Full Disk Encryption KeyMaster missing encryption

Summaryinfo

A vulnerability classified as very critical has been found in Google Android on Qualcomm. The affected element is an unknown function of the component Full Disk Encryption. This manipulation causes missing encryption (KeyMaster). In addition, an exploit is available. This vulnerability has a historic impact because of its background and how it was received.

Detailsinfo

A vulnerability classified as very critical was found in Google Android on Qualcomm (Smartphone Operating System) (version now known). Affected by this vulnerability is some unknown processing of the component Full Disk Encryption. The manipulation with an unknown input leads to a missing encryption vulnerability (KeyMaster). The CWE definition for the vulnerability is CWE-311. The product does not encrypt sensitive or critical information before storage or transmission. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was presented 06/30/2016 by Gal Beniamini as Extracting Qualcomm's KeyMaster Keys as confirmed article (Blog). The advisory is shared at bits-please.blogspot.com. The public release happened without involvement of Google. The attack can be launched remotely. Required for exploitation is a single authentication. Technical details are unknown but a public exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/23/2019). It is expected to see the exploit prices for this product increasing in the near future.MITRE ATT&CK project uses the attack technique T1600 for this issue. Due to its background and reception, this vulnerability has a historic impact. The advisory points out:

The key derivation is not hardware bound. Instead of using a real hardware key which cannot be extracted by software (for example, the SHK), the KeyMaster application uses a key derived from the SHK and directly available to TrustZone.

A public exploit has been developed by Gal Beniamini in ANSI C and been published immediately after the advisory. It is possible to download the exploit at github.com. It is declared as highly functional. We expect the 0-day to have been worth approximately $25k-$100k. The advisory illustrates:

Finding a TrustZone kernel vulnerability or a vulnerability in the KeyMaster trustlet, directly leads to the disclosure of the KeyMaster keys, thus enabling off-device attacks on Android FDE.

The problem might be mitigated by replacing the product with Apple iPhone as an alternative.

Additional details are provided at engadget.com. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

Screenshot

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion