CVE-2018-9444

In ih264dvideodecode of ih264dapi.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service remote hang or reboot with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

The vulnerability of the ION memory distribution subsystem of the Android operating system allows a hacker to modify data on the device and gain root privileges.

The vulnerability of the ION memory distribution subsystem of the Android operating system is related to deficiencies in access control between applications and the operating system. Exploiting this vulnerability allows a remote attacker to modify data on the device and gain root privileges throu...

The vulnerability of the Qualcomm operating system Android, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm operating system Android is related to deficiencies in error handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the smp_process_keypress_notification function in the Android operating system, which allows a hacker to disclose protected information

The vulnerability of the smpprocesskeypressnotification function smpact.cc in the Android operating system is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information using Bluetooth...

Vulnerability of the `ipSecSetEncapSocketOwner` function in the Android operating system, allowing a hacker to trigger a service failure

The vulnerability of the ipSecSetEncapSocketOwner function in XfrmController.cpp of the Android operating system is related to errors during resource release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the mca_ccb_hdl_req function in the Android operating system allows a hacker to disclose protected information.

The vulnerability of the mcaccbhdlreq function mcacact.cc in the Android operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information using Bluetooth...

CVE-2018-9506

In avrcmsgcback of avrcapi.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7...

CVE-2018-17400

The PhonePe wallet aka com.PhonePe.app application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover attacks by intercepting the user name and PIN during the initial configuration of the application. NOTE: the vendor says that, to exploit this, the user has to...

CVE-2018-17403

The PhonePe wallet aka com.PhonePe.app application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up their account without their knowledge. NOTE: the vendor says that, to exploit this, the user has to explicitly install a malicious app and provide accessibili...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability (CNVD-2018-19599)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer overflow vulnerability exists in...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19595)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer out-of-bounds read vulnerability exists in Android. No details of the vulnerability are provided at this time...

Google Android Memory Misreference Vulnerability (CNVD-2019-24189)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the 'wmavdevstartresphandler' function in Android. An attacker can exploit the vulnerability to occur a possible free-use message typ...

Google Android System Elevation of Privilege Vulnerability (CNVD-2018-26253)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

Google Android System elevation of privilege vulnerability (CNVD-2018-26254)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

CVE-2018-0664

A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors...

Android OS API-Breaking Flaw Offers Useful WiFi Data to Bad Actors

An “API-breaking” vulnerability has been uncovered that potentially exposes Android device systems data to rogue apps — information that could be very useful to bad actors. Researchers from Nightwatch Cybersecurity System said that certain all-points-bulletins sent out by the Android OS expose...

CVE-2018-6598

An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices. Any app co-located on the device can send an intent to factory reset the device programmatically because of com.android.server.MasterClearReceiver. This does not require any user interactio...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-20744)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An elevation of privilege vulnerability exists in the Qualcomm WLAN component of Android, where the received radioid is greater than or...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-18772)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in System in Android. A remote attacker can exploit this vulnerability to execute code...

The vulnerability of the Qualcomm User Identity Module component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm User Identity Module component in the Android operating system arises from buffer overflows during the processing of responses from SIM cards. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...