CVE-2018-5824

In CVE-2018-5824, Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF-based Linux kernels prior to the 2018-04-05 patch level are vulnerable to a buffer overflow when processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages if the firmware tid value is out of r...

ESRI ArcGis Runtime SDK for Android Arbitrary Code Execution Vulnerability

ESRI ArcGis Runtime SDK for Android is a software development kit for building native mapping applications based on the Android platform. A security vulnerability exists in the ESRI ArcGis Runtime SDK for Android prior to version 10.2.6-2. The vulnerability can be exploited to execute arbitrary...

CVE-2017-14892

CVE-2017-14892 affects Android for MSM, Firefox OS for MSM, and QRD Android builds prior to 2017-09-19. The issue stems from not properly validating the return value of q6asm_open_shared_io() in msm_pcm_hw_params(), which can lead to a dangling pointer access. The available sources describe the v...

CVE-2018-8909

The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala...

Unspecified Vulnerability in Google Android Qualcomm Closed Source Component (CNVD-2018-07479)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android. No...

Google Android Qualcomm Wma elevation of privilege vulnerability (CNVD-2018-06009)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06007)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-05992)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google Android NVIDIA libnvrm Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.NVIDIA libnvrm is one of the code libraries for the NVIDIA Tegra products. An information disclosure vulnerability...

Samsung Display Solutions App for Android Man-in-the-Middle Attack Vulnerability

Samsung Display Solutions App for Android is an Android-based mobile application developed by Samsung South Korea for viewing Samsung display devices. A security vulnerability exists in versions of the Samsung Display Solutions App for Android prior to version 3.02, which arises from the program'...

Google Android System Component Information Disclosure Vulnerability (CNVD-2018-06621)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android System component. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2017-6280

NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980...

CVE-2017-18192

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

The vulnerability of the Qualcomm GNSS operating system component in Android, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm GNSS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm Storage component in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm Storage component in the Android operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm GPS operating system for Android, which allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm GPS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2017-13228

In function ih264drefidxreordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

The vulnerability of the MediaTek CCCI driver for the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the MediaTek CCCI driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute arbitrary code within a privileged process...

Google Android 'ih264d_ref_idx_reordering' function remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. libavc is a library for controlling audio and video devices. A remote code execution vulnerability exists in the 'ih264drefidxreordering' function of libavc in Android, which stem...