Google Android Framework elevation of privilege vulnerability (CNVD-2018-18781)

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.Framework is one of the Android framework components. An elevation of privilege vulnerability exists in Framework in Android versions 8.0 and 8.1. An attacker can...

CVE-2018-7944

Huawei smart phones Emily-AL00A with software 8.1.0.106SP2C00 and 8.1.0.107SP5C00 have a Factory Reset Protection FRP bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP...

Google Android Android runtime information disclosure vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in Android runtime in Google Android 8.1, which can be exploited by attackers to obtain sensitive information...

CVE-2017-13263

A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160...

CVE-2017-13281

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2018-03846)

Android is the United States Google Google and the Open Handheld Alliance referred to as OHA jointly developed a set of Linux-based open source operating system. keyStore service is one of the Java data certificate management service. An elevation of privilege vulnerability exists in the KeyStore...

CVE-2017-13199

In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-13184

In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

CVE-2017-13181

In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-00630)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A remote...

Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-00636)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaFramework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A...