CVE-2016-2450

CVE-2016-2450 affects Android Mediaserver (libstagefright) where codecs/on2/enc/SoftVPXEncoder.cpp does not validate OMX buffer sizes. The issue resides in mediaserver’s handling of certain video/codec operations and enables local privilege escalation to Signature or SignatureOrSystem via a craft...

Android MediaTek Wi-Fi Driver Privilege Mobilization Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.MediaTek Wi-Fi Driver is one of the MediaTek wireless card drivers. A boost vulnerability exists in Android's MediaTek Wi-Fi Driver, which can be exploited by a local attacker to execute...

Android Qualcomm TrustZone elevation of privilege vulnerability (CNVD-2016-02834)

Android is an open source operating system based on Linux. A security vulnerability in Android Qualcomm TrustZone allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Qualcomm MDP Driver Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm MDP Driver is one of the Qualcomm MDP drivers. A power lifting vulnerability exists in Android's Qualcomm MDP Driver, which can be exploited by a local attacker to execute...

Old Android Flaw Elevates Privileges, Steals SMS, Call Logs

A five-year-old Android vulnerability disclosed today affects hundreds of different device models going back to Jelly Bean 4.3. Older devices are at the greatest risk; newer devices running Android with SE Android, the OS’ implementation of Security Enhanced Linux, are at a lesser risk. The...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Minikin operating system’s library exists due to the lack of checks for negative values of the font property. Exploiting this vulnerability could allow a local attacker to cause a service failure memory corruption using a specially crafted font...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm ARM operating system Android is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the decoder/impeg2dvld.c function in the Android operating system’s media server is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption using a specially crafted...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the libs/binder/IMemory.cpp function in the IMemory Native Interface of the Android operating system exists due to incorrect calculation of the heap size. Exploiting this vulnerability allows a local attacker to increase their privileges through a specially created applicatio...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm RF operating system’s Android driver is due to an incorrect limitation on access to ioctl calls for sockets. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the H.264 decoder in the libstagefright library of the Android operating system exists due to incorrect processing of the Memory Management Control Operation MMCO data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Cybozu kintone for Android Mobile Messaging Vulnerability

Cybozu kintone for Android is an Android-based business cloud application for business communication and collaboration by Cybozu. A security vulnerability exists in Cybozu kintone for Android 1.0.5 and previous versions 1.0.0, which can be exploited by an attacker to discover authentication token...

CVE-2016-2427

The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for attackers to defeat a cryptographic protection mechanism and discover an authentication key via a crafted application, aka internal bug...

CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 26399350...

CVE-2016-0837

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read and memory corruption via a crafted media file, aka...

UBUNTU-CVE-2016-2414

The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a denial of service memory corruption and reboot loop via a crafted font, aka internal bug 26413177...

UBUNTU-CVE-2016-2413

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

Android Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Codec in Android versions prior to 6.0 and prior to 6.0.1. A remote attacker can exploit this vulnerability to cau...

Cheetah Security Master Android International Password Bypass Vulnerability

Cheetah Security Master is a mobile security software from Cheetah Mobile. Cheetah Security Master suffers from a password bypass vulnerability, through which an attacker can bypass authentication and directly access encrypted information...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...