Wear OS Security Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-01-05 or later from the January 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...

Android Security Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

PT-2023-25642 · St · St54-Android-Packages-Apps-Nfc

Name of the Vulnerable Software and Affected Versions: ST ST54-android-packages-apps-Nfc package version 130-20230215-23W07p0 and earlier Description: The issue is related to an out-of-bounds read in the ST ST54-android-packages-apps-Nfc package for Android. Recommendations: For versions prior to...

Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

Google is highlighting the role played by Clang sanitizers in hardening the security of the cellular baseband in the Android operating system and preventing specific kinds of vulnerabilities. This comprises Integer Overflow Sanitizer IntSan and BoundsSanitizer BoundSan, both of which are part of...

Google Android suffers from unspecified vulnerability (CNVD-2023-9748548)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android suffers from unspecified vulnerability (CNVD-2023-9767724)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

Google Android has an unspecified vulnerability (CNVD-2023-9748449)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android suffers from unspecified vulnerability (CNVD-2023-9748845)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android suffers from unspecified vulnerability (CNVD-2023-9749042)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from the US-based Google Inc. Google Android suffers from a security vulnerability that stems from the possibility of local privilege escalation...

CVE-2023-32832

creationtimestamp| type| source ---|---|--- 2023-11-06 07:30:34+00:00| seen| https://t.me/cibsecurity/73565 2024-06-13 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html 2024-06-13 21:56:45+00:00| published-proof-of-concept|...

Pixel Update Bulletin—November 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2023-11-01 or later address all issues in this bulletin and all issues in the November 2023 Android...

CVE-2023-46139 KernelSU signature validation mismatch

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic...

Pixel Watch Security Bulletin—September 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2023-09-05 or later address all applicable issues in the September 2023 Android Security Bulletin and all issues in this...

Google Android elevation of privilege vulnerability (CNVD-2024-02335)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android due to an insecure PendingIntent in the createQuickShareAction of SaveImageInBackgroundTask.java, which can be exploited by an attacker to elevate privileges...

Wear OS Security Bulletin—September 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2023-09-05 or later from the September 2023 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...

ASB-A-223793631

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2023-4361

Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2023-18057 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that allows the microphone privacy indicator to be obscured in multiple locations. This could lead to...

Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China

Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy and security of up to 1.5 million Android users at risk. These apps engage in deceptive behaviour and secretly send sensitive user data to malicious servers in China. Pradeo, a leading mobile...