The vulnerability of the NVIDIA Tegra X1 TZ operating system allows a hacker to increase their privileges.

The vulnerability of the NVIDIA Tegra X1 TZ operating system’s Android platform arises from data writing beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

Google Android Qualcomm WLAN Privilege Access Control Vulnerability (CNVD-2018-22736)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Olive Tree Ftp Server application for Android Information Disclosure Vulnerability

Olive Tree Ftp Server application for Android is an application for building FTP servers on the Android platform. A security vulnerability exists in version 1.32 of the Olive Tree Ftp Server application for Android-based platforms, which stems from the program failing to store data securely. No...

CVE-2018-10812

The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/sharedprefs/com.bitpiepreferences.xml on Android or a plist file in the app data folder on iO...

Google Android Qualcomm Component Denial of Service Vulnerability (CNVD-2018-10601)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A denial of service vulnerability exists in the Google Android Qualcomm WLAN component. An attacker...

CVE-2017-3160

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity...

CVE-2018-5326

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

UBUNTU-CVE-2017-9712

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlanhddcfg80211setie, a buffer over-read occurs...

UBUNTU-CVE-2017-9689

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption...

UBUNTU-CVE-2017-15850

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers...

OhMiBod Remote app for Android and iOS User Impersonation Vulnerability

OhMiBod Remote app for Android and iOS is a wireless remote control app for Android and iOS based platforms. A security vulnerability exists in the OhMiBod Remote app for Android and iOS based platforms. A remote attacker can exploit the vulnerability by sniffing network traffic and editing the...

Google Chrome Information Disclosure Vulnerability (CNVD-2017-33598)

Google Chrome for Linux, Windows, Mac, and Android is a web browser developed by Google for Linux, Windows, Mac, and Android.Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. software platforms. A security vulnerability...

CVE-2017-9715

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a vendor command, a buffer over-read can occur...

CVE-2017-11055

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCANL80211VENDORSUBCMDSETWIFICONFIGURATION cfg80211 vendor command, a buffer over-read can occur...

CVE-2017-11046

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...

The vulnerability of the libavc library of the Android operating system’s Media Framework allows a hacker to execute arbitrary code.

The vulnerability of the libavc library used in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the libstagefright library in the Media Framework of the Android operating system allows a hacker to escalate their privileges.

The vulnerability of the libstagefright library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2017-12816

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC...

Conti Car Share Android app has a payment logic flaw

Car sharing app is a new energy vehicle time-sharing platform. A payment logic vulnerability exists in Kandi Car Sharing Android app. Attackers can arbitrarily modify the size of the amount by exploiting the vulnerability...

Google Android Qualcomm Component Null Pointer Reference Vulnerability

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the TrustZone syscall of the Qualcomm closed-source...