4934 matches found
Race condition
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381...
CVE-2019-2189
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381...
CVE-2019-2190
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2188
CVE-2019-2188 affects the Android kernel’s Easel image driver. The issue is memory corruption caused by race conditions, enabling local escalation of privilege to System level without user interaction. Public patch details or fixed versions are not provided in the supplied documents. No exploitat...
CVE-2019-2189
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381...
CVE-2019-2189
CVE-2019-2189 affects the Image driver in the Android kernel (Easel driver). The vulnerability stems from race conditions that can cause memory corruption, enabling local elevation of privilege to SYSTEM with no user interaction required. Impact is described as local EoP with high confidentiality...
CVE-2019-2188
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112309571...
PT-2019-16279
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to possible memory corruption due to race conditions in the Easel driver. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not requir...
PT-2019-16280
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in LG's LAF component, which could lead to a leak of information in a protected disk partition. This might result in local information disclosure via USB, requiring User...
CVE-2019-2188: Concurrent Execution using Shared Resource with Improper Synchronization
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112309571...
CVE-2019-2190: Improper Restriction of Operations within the Bounds of a Memory Buffer
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2189: Concurrent Execution using Shared Resource with Improper Synchronization
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381...
CVE-2019-2191: Improper Restriction of Operations within the Bounds of a Memory Buffer
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
PT-2019-16278
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to possible memory corruption due to race conditions in the Easel driver. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not requir...
PT-2019-16281
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in LG's LAF component, which could lead to a leak of information in a protected disk partition. This might result in local information disclosure via USB, requiring User...
VulnCheck KEV: CVE-2019-2215
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."...
Google Android Kernel elevation of privilege vulnerability (CNVD-2019-47014)
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA in the U.S. Kernel is one of the kernel components. An elevation of privilege vulnerability exists in the Kernel component of Android. An attacker can exploit this vulnerability to elevate...
Google Android Kernel Elevation of Privilege Vulnerability (CNVD-2019-47018)
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA in the U.S. Kernel is one of the kernel components. An elevation of privilege vulnerability exists in the Kernel component of Android. An attacker can exploit this vulnerability to elevate...
CVE-2019-9446
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
DEBIAN-CVE-2019-9456
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...