CVE-2018-9448

In avctbcbmsgind of avctbcbact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0...

CVE-2018-9458

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

CVE-2018-9427

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22762)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, which can be exploited by an attacker to elevate...

CVE-2018-9510

In smpprocencinfo of smpact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

CVE-2018-9508

In smpprocesskeypressnotification of smpact.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Androi...

CVE-2018-9505

In mcaccbhdlreq of mcacact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

CVE-2018-9476

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

CVE-2018-9473

In ihevcdparseseipayload of ihevcdparseheaders.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Androi...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-03707)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android versions 8.0 and 8.1. An attacker can exploit this vulnerability to elevate...

Google Android System Information Disclosure Vulnerability (CNVD-2018-22653)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android 8.0, 8.1, and 9, which can be exploited by attackers to obtain sensitive...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22765)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by an attacker to...

Google Android System Information Disclosure Vulnerability (CNVD-2018-22652)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android 8.0, 8.1, and 9, which can be exploited by attackers to obtain sensitive...

LG Products SystemUI application intents Access Control Error Vulnerability

LG devices based on Android are smart devices based on the Android platform from the South Korean LG Group. SystemUI application intents is one of the system applications. A security vulnerability exists in SystemUI application intents in LG products based on the Android versions 6.0 to 8.1...

CVE-2018-15482

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006...

Google Android Media framework remote code execution vulnerability (CNVD-2018-18769)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-18781)

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.Framework is one of the Android framework components. An elevation of privilege vulnerability exists in Framework in Android versions 8.0 and 8.1. An attacker can...

CVE-2018-7944

Huawei smart phones Emily-AL00A with software 8.1.0.106SP2C00 and 8.1.0.107SP5C00 have a Factory Reset Protection FRP bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP...

Google Android Android runtime information disclosure vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in Android runtime in Google Android 8.1, which can be exploited by attackers to obtain sensitive information...

Google Android pci sysfs elevation of privilege vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. An elevation of privilege...