CVE-2018-9506

In avrcmsgcback of avrcapi.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7...

CVE-2018-17403

The PhonePe wallet aka com.PhonePe.app application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up their account without their knowledge. NOTE: the vendor says that, to exploit this, the user has to explicitly install a malicious app and provide accessibili...

CVE-2018-17400

The PhonePe wallet aka com.PhonePe.app application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover attacks by intercepting the user name and PIN during the initial configuration of the application. NOTE: the vendor says that, to exploit this, the user has to...

Google Android Memory Misreference Vulnerability (CNVD-2019-24189)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the 'wmavdevstartresphandler' function in Android. An attacker can exploit the vulnerability to occur a possible free-use message typ...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19595)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer out-of-bounds read vulnerability exists in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability (CNVD-2018-19599)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer overflow vulnerability exists in...

Google Android System Elevation of Privilege Vulnerability (CNVD-2018-26253)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

Google Android System elevation of privilege vulnerability (CNVD-2018-26254)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

CVE-2018-0664

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

Android OS API-Breaking Flaw Offers Useful WiFi Data to Bad Actors

An “API-breaking” vulnerability has been uncovered that potentially exposes Android device systems data to rogue apps — information that could be very useful to bad actors. Researchers from Nightwatch Cybersecurity System said that certain all-points-bulletins sent out by the Android OS expose...

CVE-2018-6598

An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices. Any app co-located on the device can send an intent to factory reset the device programmatically because of com.android.server.MasterClearReceiver. This does not require any user interactio...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-20744)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An elevation of privilege vulnerability exists in the Qualcomm WLAN component of Android, where the received radioid is greater than or...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-18772)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in System in Android. A remote attacker can exploit this vulnerability to execute code...

The vulnerability of the Qualcomm User Identity Module component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm User Identity Module component in the Android operating system arises from buffer overflows during the processing of responses from SIM cards. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Google Android Qualcomm WLAN Buffer Overflow Vulnerability (CNVD-2018-17189)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm WLAN driver is one of the wireless LAN drivers. Qualcomm WLAN driver is one of the wireless LAN drivers. A buff...

Android Qualcomm fwlog information disclosure vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm fwlog is one of the firewall logging component. An information disclosure vulnerability exists in Qualco...

Google Android Qualcomm bootloader information disclosure vulnerability (CNVD-2018-17505)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...

The vulnerability of Qualcomm Audio component in the Android operating system allows attackers to compromise the integrity, accessibility, and confidentiality of data.

The vulnerability of the Qualcomm Audio omx aac component in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Data Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Data Services’ Android operating system stems from an overflow in memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...