The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the libs/binder/IMemory.cpp function in the IMemory Native Interface of the Android operating system exists due to incorrect calculation of the heap size. Exploiting this vulnerability allows a local attacker to increase their privileges through a specially created applicatio...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the H.264 decoder in the libstagefright library of the Android operating system exists due to incorrect processing of the Memory Management Control Operation MMCO data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the decoder/impeg2dvld.c function in the Android operating system’s media server is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption using a specially crafted...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Minikin operating system’s library exists due to the lack of checks for negative values of the font property. Exploiting this vulnerability could allow a local attacker to cause a service failure memory corruption using a specially crafted font...

Cybozu kintone for Android Mobile Messaging Vulnerability

Cybozu kintone for Android is an Android-based business cloud application for business communication and collaboration by Cybozu. A security vulnerability exists in Cybozu kintone for Android 1.0.5 and previous versions 1.0.0, which can be exploited by an attacker to discover authentication token...

CVE-2016-2427

The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for attackers to defeat a cryptographic protection mechanism and discover an authentication key via a crafted application, aka internal bug...

CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 26399350...

CVE-2016-0837

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read and memory corruption via a crafted media file, aka...

UBUNTU-CVE-2016-2413

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

UBUNTU-CVE-2016-2414

The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a denial of service memory corruption and reboot loop via a crafted font, aka internal bug 26413177...

Cheetah Security Master Android International Password Bypass Vulnerability

Cheetah Security Master is a mobile security software from Cheetah Mobile. Cheetah Security Master suffers from a password bypass vulnerability, through which an attacker can bypass authentication and directly access encrypted information...

Android Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Codec in Android versions prior to 6.0 and prior to 6.0.1. A remote attacker can exploit this vulnerability to cau...

Android Qualcomm Power Management Component Power Elevation Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Power Management is a power management component developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Power Management component in Android...

The vulnerability of the Android operating system allows a perpetrator to gain access to protected information in the TrustZone.

The vulnerability of the Android operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the protected TrustZone area by utilizing the kernel...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass security measures and delete data...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libvpx library, which is part of the mediaserver component in the Android operating system, arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the MediaTek Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the NuPlayer::GenericSource::notifyPreparedAndCleanup function located in media/libmediaplayerservice/nuplayer/GenericSource.cpp in the mediaserver component of the Android operating system exists due to improper management of the mDrmManagerClient objects. Exploiting this...

The vulnerability of the Android operating system allows a hacker to bypass security measures and obtain confidential information.

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...