CVE-2017-13159: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879772...

CVE-2017-13158: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32879915...

CVE-2017-13157: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android system activitymanagerservice. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-32990341...

PT-2017-12944

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description An information disclosure issue exists in the Android system, specifically in the activitymanagerservice. This issue may lead to the exposure of sensitive information...

PT-2017-12942

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description An information disclosure issue exists in the Android system, specifically in the activitymanagerservice. This issue may lead to the exposure of sensitive information...

PT-2017-12943

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description An information disclosure issue exists in the Android system, specifically in the activitymanagerservice. This issue may lead to the exposure of sensitive information...

Google Android System(activitymanagerservice) Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.System activitymanagerservice is a core system used to manage the lifecycle of application processes, services and other functions. System Systemactivitymanagerservice in Android ha...

Google Android System (activitymanagerservice) information disclosure vulnerability (CNVD-2017-36923)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.System activitymanagerservice is a core system used to manage the lifecycle of application processes, services and other functions. System Systemactivitymanagerservice in Android ha...

Google Android IntentFilter suffers from a deserialization memory overflow vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android IntentFilter has a deserialization memory overflow vulnerability. The vulnerability is that the Android system service ActivityManagerService has an...

Race condition

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat'...

CVE-2014-7953

CVE-2014-7953 describes a race condition in Android 4.4.4’s ActivityManagerService.bindBackupAgent that lets a local user with adb shell execute code as system by coordinating an adb install with a crafted logcat script to force bindBackupAgent to use an ApplicationInfo uid of 1000. The flaw stem...

CVE-2014-7953: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat'...

PT-2017-6117

Name of the Vulnerable Software and Affected Versions: Android version 4.4.4 Description: A race condition exists in the bindBackupAgent method within the ActivityManagerService in Android. This issue allows local users with adb shell access to execute arbitrary code or install any valid package ...

Code injection

The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrated by interfering with use of the Settings...

CVE-2015-3833: Improper Access Control

The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bu...

CVE-2015-3833

The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bu...

CVE-2015-3833

CVE-2015-3833 affects Android up to version 5.1.1 (LMY48I). Root cause is in ActivityManagerService.getRunningAppProcesses, allowing a crafted app to bypass getRecentTasks restrictions and reveal the foreground app name. Public descriptions across sources confirm the flaw exists in Android before...

ADB backupAgent mention the right vulnerability analysis CVE-2 0 1 4-7 9 5 3-the vulnerability warning-the black bar safety net

0x00 summary CVE-2 0 1 4-7 9 5 3 is present in the android backup agent in a mention the right vulnerability. ActivityManagerService in bindBackupAgent method fails to check the incoming uid parameters, combined with the addition of a race condition the use of techniques, the attacker can be in a...