Wave of Java-Based RATs Target Tax Filers

Spammers are spreading Java-based remote access Trojans, known as jRATs, targeting tax filers with attachments named “IRS Updates.jar” and “ImportantPDF.jar” that, if executed, give attackers access to compromised endpoints. Zscaler, which is tracking the jRATs, believes some of the campaigns cou...

Broadcom: Multiple memory corruptions in "dhd_pno_process_anqpo_result" (CVE-2017-0572)

Detailed analysis of reference : the https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi4.html the first part https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi11.html Part II Broadcom produces the Wi-Fi HardMAC SoCs which are used to...

Half of Android Devices Unpatched Last Year

Google said more than half of Android devices haven’t received a security update in the past year, and the percentage of potentially harmful apps running on devices installed from all sources rose in 2016. The numbers come from the Android Security 2016 Year In Review PDF released Wednesday. Whil...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability (CNVD-2017-03825)

Android on Nexus 5X is a Linux-based open source operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA, of which the Qualcomm Wi-Fi Driver is a wireless driver component. An information disclosure vulnerability exists in the Qualcomm Wi-Fi...

CVE-2017-0485

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

UBUNTU-CVE-2017-0484

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

Secure Hub Continuously Prompts for Citrix PIN and Active Directory Password

Secure Hub continuously prompts for domain password on Android devices. Even though we have a Citrix PIN configured for all devices, we are required to put in our full domain password to authenticate...

Google Android Qualcomm Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-01426)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the Qualcomm Wi-Fi driver in Android on several Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Qualcomm sub-component “libeffets” in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

UBUNTU-CVE-2017-0422

A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Broadcom’s Wi-Fi driver for the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2017-0401

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitiv...

Multiple Samsung Android Mobile Phones Denial of Service Vulnerabilities

Samsung Android is a line of Android smartphones from the South Korean company Samsung. A security vulnerability exists in Samsung Android devices. The vulnerability can be exploited by an attacker with the help of a specially crafted resource profile to cause a system crash, resulting in a denia...

Google Android Synaptics elevation of privilege vulnerability

Android on Nexus 5X etc. is a set of open source operating system running on Nexus 5X etc. smart devices and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA for short.Synaptics Touchscreen Driver is one of the touchscreen drivers. An elevation of privilege...

CVE-2016-8434

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Google Android Qualcomm Sound Driver Information Disclosure Vulnerability

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a Qualcomm-developed sound driver used in the Nexus 5X. Qualcomm Sound Driver is a sound driver developed by Qualcomm. An...

Google Pixel C NVIDIA libomx Library local elevation of privilege vulnerability (CNVD-2016-12176)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Google Pixel XL smart device, etc. The NVIDIA libomx library is one of the NVIDIA libomx library is one of the standard library components for multimedia...

Google Pixel C NVIDIA libomx Library local elevation of privilege vulnerability

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Google Pixel XL smart device, etc. The NVIDIA libomx library is one of the NVIDIA libomx library is one of the standard library components for multimedia...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12168)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12169)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...