proxy server seeing Android traffic from client IP

Your proxy server may see the client IP from Android devices where as iOS it sees and expects the subnet IP of the NS. How to filter traffic using the Subnet IP address for Android Devices?...

Google Android Qualcomm Wi-fi Driver Information Disclosure Vulnerability (CNVD-2017-10564)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Qualcomm Wi-Fi driver in Android on Nexus 5X, Pixel and Pixel XL devices. An attacker can exploit the vulnerability to...

Google Adds New Behavior-Based Malware Scanner To Every Android Device

In order to keep its billions of users safe, Google has introduced another security defense for its Android devices, called Google Play Protect. Google Play Protect, which is part of the Google Play Store app, uses machine learning and app usage analysis to weed out the dangerous and malicious...

UBUNTU-CVE-2017-0599

A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

Android Qualcomm bootloader privilege escalation vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

Android Qualcomm camera driver information disclosure vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...

Android Qualcomm bootloader boost vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

BlackBerry Smartphone Broadcom Wi-Fi driver for Android Arbitrary Code Execution Vulnerability

BlackBerry smartphones are smartphones manufactured by BlackBerry.Broadcom Wi-Fi driver for Android is a Broadcom-developed Wi-Fi driver module for use in Android. A security vulnerability exists in the Broadcom Wi-Fi driver for Android used in BlackBerry smartphones prior to Build AAE570. A remo...

Information disclosure

Samsung Android devices with L5.0/5.1, M6.0, and N7.x software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290...

CVE-2017-7978

Samsung Android devices with L5.0/5.1, M6.0, and N7.x software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290...

CVE-2016-6726

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices...

Wave of Java-Based RATs Target Tax Filers

Spammers are spreading Java-based remote access Trojans, known as jRATs, targeting tax filers with attachments named “IRS Updates.jar” and “ImportantPDF.jar” that, if executed, give attackers access to compromised endpoints. Zscaler, which is tracking the jRATs, believes some of the campaigns cou...

Broadcom: Multiple memory corruptions in "dhd_pno_process_anqpo_result" (CVE-2017-0572)

Detailed analysis of reference : the https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi4.html the first part https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi11.html Part II Broadcom produces the Wi-Fi HardMAC SoCs which are used to...

Half of Android Devices Unpatched Last Year

Google said more than half of Android devices haven’t received a security update in the past year, and the percentage of potentially harmful apps running on devices installed from all sources rose in 2016. The numbers come from the Android Security 2016 Year In Review PDF released Wednesday. Whil...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability (CNVD-2017-03825)

Android on Nexus 5X is a Linux-based open source operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA, of which the Qualcomm Wi-Fi Driver is a wireless driver component. An information disclosure vulnerability exists in the Qualcomm Wi-Fi...

CVE-2017-0485

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

UBUNTU-CVE-2017-0484

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID:...

Secure Hub Continuously Prompts for Citrix PIN and Active Directory Password

Secure Hub continuously prompts for domain password on Android devices. Even though we have a Citrix PIN configured for all devices, we are required to put in our full domain password to authenticate...

Google Android Qualcomm Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-01426)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the Qualcomm Wi-Fi driver in Android on several Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...

Android DoS

The vulnerability of the Qualcomm sub-component “libeffets” in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...