Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. An attacker exploiting this vulnerability could result in a local privilege escalation without the need for additional execute privileges...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to cause a local denial of service without additional execute privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. An attacker exploiting this vulnerability could result in a local privilege escalation without the need for additional execute privileges...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

CVE-2020-4099 HCL Verse for Android is susceptible to an APK signing key check vulnerability

The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app...

PT-2022-14684

Name of the Vulnerable Software and Affected Versions Android versions 10 through 13 Description A logic error in the code of KeyguardHostViewController.java and related files allows for a possible lockscreen bypass, leading to local escalation of privilege with no additional execution privileges...

CVE-2022-41797

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a...

Android App "IIJ SmartKey" vulnerable to information disclosure

Overview Android App "IIJ SmartKey" provided by Internet Initiative Japan Inc. contains an information disclosure vulnerability CWE-200. Naoaki Iwakiri reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Under...

CVE-2022-20410

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Code injection

In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929...

PT-2022-14655 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android SoC Description: The issue is related to a missing authorization in the system service, which lacks a permission check. This results in a Local Elevation of Privilege. Recommendations: For Android versions Android SoC...

PT-2022-14660 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue concerns an unauthorized service within the system service that lacks permission checks, leading to Local Elevation of Privilege. Recommendations: At the moment, there is...

Google Pixel 安全漏洞

Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which is caused by a flaw in messaging. By sending a specially crafted request, an attacker can exploit this vulnerability to cause a denial of...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android due to a logic error in the StatusBarNotificationActivityStarter.java The vulnerability is due to a logic error in the handleFullScreenIntent code of...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the getBackgroundRestrictionExceptionReason code of AppRestrictionController.java, which can be exploited by an attacker to elevate...

Google Pixel 安全漏洞

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...

CVE-2022-2853

Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-20385

a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens.Product: AndroidVersions: Android SoCAndroid ID: A-238379819...

CVE-2021-0871

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

PT-2022-14621 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a path traversal error in the checkAccess function of MediaProvider.java. This error can lead to a possible file deletion, resulting in local escalation of...