Google Android Information Disclosure Vulnerability (CNVD-2024-02678)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused due to free usage in system components. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

PT-2023-6600 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the Bluetooth component of the Android operating system. This could allow a paired Bluetooth device to access a long-term identifier for an...

Huawei HarmonyOS and EMUI Security Bypass Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in Huawei...

Google Android OS 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

Google Android OS 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to cause an elevation of privilege...

Google Android OS 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android OS has a security vulnerability. An attacker exploiting the vulnerability can remotely execute code...

Google Android OS 安全漏洞

Google Android is a Linux-based open source operating system from Google. An information disclosure vulnerability exists in Google Android Framework, which can be exploited by attackers to obtain sensitive information...

Huawei EMUI Denial of Service Vulnerability (CNVD-2023-51674)

Huawei EMUI is an Android-based mobile operating system developed by the Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei EMUI version 12.0.0, which can be exploited by attackers to cause a denial of service...

CVE-2023-21102

In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2023-21081

In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

CVE-2023-20935

In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

The vulnerability of Mozilla Firefox’s Intent mechanism on Android operating systems allows attackers to upload arbitrary files.

The vulnerability of Mozilla Firefox’s Intent mechanism on Android operating systems is related to the absence of request execution when opening external applications. Exploiting this vulnerability allows a remote attacker to upload arbitrary files...

CVE-2023-20940

In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Samsung adds Message Guard protection against zero-click exploits

Samsung has announced the introduction of Message Guard for the Samsung Galaxy S23 series. It will be gradually rolled out to other Galaxy smartphones and tablets later this year. Message Guard works on images received in messages by the apps "Samsung Messages" and "Messages by Google" and...

Google Android OS和unisoc部分产品安全漏洞

Google Android is a set of Linux-based open source operating system by the American company Google Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of permission checking in the messaging service, leading to a local denial of service...

Google Android OS和unisoc部分产品缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...

Google Android OS和unisoc部分产品安全漏洞

Google Android is a set of Linux-based open source operating system by the American company Google Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of permission checking in the messaging service, leading to a local denial of service...

Google Android OS和unisoc部分产品输入验证错误漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...

Google Android OS和unisoc部分产品缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...