Hydrogen Krypton Travel App for Android suffers from an override access vulnerability

Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. The vulnerability exists in "My Wallet" and "My Orders" in the Android version of Hydrogen Krypton Mobility APP, which allows an attacker to view any user's details by using their cell phone numbe...

Vivo Bike Share Android App Has Logic Design Flaws

Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

Facebook WhatsApp Messenger for Android Vulnerability Local Message Disclosure Vulnerability

Facebook WhatsApp Messenger for Android is a suite of mobile applications from Facebook, Inc. in the United States based on the Android platform that utilize the web to send text messages. The application uses the contact information in the smartphone to find contacts using the program to send...

The vulnerability of the Android operating system’s IOCTL handler from the SAF repository, which allows a attacker to trigger a numerical overflow and write beyond the memory boundaries.

The vulnerability of the Android operating system’s IOCTL handler from the CAF repository arises due to synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability can allow an attacker to trigger a full memory overflow and write beyond the memory...

Wireless 'BlueBorne' Attacks Target Billions of Bluetooth Devices

Researchers disclosed a bevy of Bluetooth vulnerabilities Tuesday that threaten billions of devices from Android and Apple smartphones to millions of printers, smart TVs and IoT devices that use the short-range wireless protocol. Worse, according to researchers at IoT security firm Armis that fou...

CVE-2017-0801

A elevation of privilege vulnerability in the MediaTek libmtkomxvdec. Product: Android. Versions: Android kernel. Android ID: A-38447970. References: M-ALPS03337980...

CVE-2017-0766

A remote code execution vulnerability in the Android media framework libjhead. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688...

CVE-2017-0787

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31664)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31744)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit this...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31740)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...

Google Android Qualcomm Camera Driver Remote Code Execution Vulnerability (CNVD-2017-31667)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Camera driver is a camera driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Camera driver in Android. A remote attacker c...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-32471)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the MediaTek auxadc driver is a MediaTek converter driver used in it. An elevation of privilege vulnerability exists in the MediaTek auxadc driver for Android. An attacker can...

Google Android MediaTek libmtkomxvdec elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and MediaTek libmtkomxvdec is a MediaTek decoder library used in it. An elevation of privilege vulnerability exists in MediaTek libmtkomxvdec in Android. An attacker can exploit this...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-32470)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the MediaTek accessory detector driver is a MediaTek accessory detector driver used in it. An elevation of privilege vulnerability exists in the MediaTek accessory detector...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-31362)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media framework libstagefright is one of the hard-decoding support frameworks for multimedia development. A remote code execution vulnerability exists in Media...

Google Android Qualcomm Memory Subsystem Memory Corruption Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Memory subsystem is a Qualcomm memory subsystem. A security vulnerability exists in the Qualcomm Memory subsystem in Android. An attacker could exploit this vulnerability...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-31363)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. media framework libavc is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework libavc in Android. A remote attacke...

The vulnerability of the Android operating system from the CAF repository exists due to improper processing of RTP packets, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system from the CAF repository exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information during the processing of...