Google Android Information Disclosure Vulnerability (CNVD-2018-26776)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in several functions of the ContentProvider.java file in Android, which stems from the program's failure to verify URIs and can be...

Google Android Information Disclosure Vulnerability (CNVD-2018-26778)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the dumpExtractors of the IMediaExtractor.cp file in Android, which can be exploited by an attacker to obtain recently accessed...

Google Android elevation of privilege vulnerability (CNVD-2018-26777)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the V4L2SliceVideoDecodeAccelerator::Dequeue in the v4l2slicevideodecodeaccelerator.cc file in Android versions 8.1 and 9, which...

Google Android out-of-bounds write vulnerability (CNVD-2019-01568)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An out-of-bounds write vulnerability exists in the persistsetkey and other functions of cryptfs.cpp in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. A local attacker...

Google Android integer overflow vulnerability (CNVD-2019-01769)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An integer overflow vulnerability exists in readBytes in xltdecwbxml.c in Google Android. An attacker can exploit this vulnerability to cause an out-of-bounds read, which...

Google Android out-of-bounds write vulnerability (CNVD-2019-01562)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the 'lppTransposer' function of the lpptran.cpp file in Android, which stems from a lack of boundary detection in the program and ca...

Android Permission License and Access Control Vulnerability (CNVD-2019-09148)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android, which stems from the program's failure to perform proper access control. A detailed vulnerabili...

Google Android Privilege Access Control Vulnerability (CNVD-2018-25314)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege access control vulnerability exists in Yocto in Android, which stems from the program failing to properly configure the daemon. An attacker could exploit the...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27588)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the ixheaacdresetacelpdatafix of the ixheaacdlpc.c file in Android version 9, which stems from a lack of boundary checking in the program...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27589)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the ixheaacdoverlapadd1.s file of ixheaacdoverlapadd1armv8 in Android version 9, which stems from a lack of boundary checking in the...

CVE-2018-9347

In function SMFParseMetaEvent of file eassmf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2018-9527

In vorbisbookdecodevset of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2018-9444

In ih264dvideodecode of ih264dapi.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service remote hang or reboot with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2018-9358

In gattsprocessattributereq of gattsc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Produc...

The vulnerability of the Qualcomm operating system Android, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm operating system Android is related to deficiencies in error handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ION memory distribution subsystem of the Android operating system allows a hacker to modify data on the device and gain root privileges.

The vulnerability of the ION memory distribution subsystem of the Android operating system is related to deficiencies in access control between applications and the operating system. Exploiting this vulnerability allows a remote attacker to modify data on the device and gain root privileges throu...

The vulnerability of the smp_process_keypress_notification function in the Android operating system, which allows a hacker to disclose protected information

The vulnerability of the smpprocesskeypressnotification function smpact.cc in the Android operating system is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information using Bluetooth...

The vulnerability of the mca_ccb_hdl_req function in the Android operating system allows a hacker to disclose protected information.

The vulnerability of the mcaccbhdlreq function mcacact.cc in the Android operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information using Bluetooth...

Vulnerability of the `ipSecSetEncapSocketOwner` function in the Android operating system, allowing a hacker to trigger a service failure

The vulnerability of the ipSecSetEncapSocketOwner function in XfrmController.cpp of the Android operating system is related to errors during resource release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...