Improper access control

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

Google Android Qualcomm Component eMBMS Unauthorized Operation Vulnerability

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in eMBMS of the Qualcomm closed-source component in...

The vulnerability of component 1x of the Android operating system, allowing a hacker to bypass security restrictions

The vulnerability of component 1 of the Android operating system is related to errors in number processing. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-03383)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. MediaTek is a MediaTek component used in one of MediaTek's devices. An elevation of privilege vulnerability exists in the MediaTek components of Android, including the...

CVE-2014-9883

Integer overflow in drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28769912 and Qualcomm internal bug CR565160...

CVE-2014-9890

Off-by-one error in drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application that sends an I2C command, aka Android internal bug 28770207 and Qualcomm...

CVE-2014-9883

Integer overflow in drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28769912 and Qualcomm internal bug CR565160...

CVE-2015-8888

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR81393...

UBUNTU-CVE-2014-9801

Multiple integer overflows in lib/libfdt/fdtrw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078...

Design/Logic Flaw

The viddecsetmetabuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bu...

Integer overflow

Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478...

UBUNTU-CVE-2014-9788

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...

CVE-2014-9786

Heap-based buffer overflow in drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm...

CVE-2014-9788

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...