Your Android Phone Can Get Hacked Just By Playing This Video

Are you using an Android device? Beware! You should be more careful while playing a video on your smartphone—downloaded anywhere from the Internet or received through email. That's because, a specially crafted innocuous-looking video file can compromise your Android smartphone—thanks to a critica...

Cat Runner Decorate Home for Android Input Validation Error Vulnerability

Cat Runner Decorate Home for Android is a parkour game based on the Android platform. An input validation error vulnerability exists in the application API of Cat Runner Decorate Home version 2.8.0 for Android, which can be exploited by an attacker to modify the application data and obtain more...

This Week in Security News: Spam Campaigns and Mobile Malware

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about a mobile malware that infects Android devices by exploiting the vulnerabilities found within the operating system. Also, read...

CVE-2019-5833

Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page...

CVE-2019-2009

In l2clccprocpdu of l2cfcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0...

CVE-2019-1985

In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell checker due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Texture Information Disclosure Vulnerability

Texture is a magazine management application. An information disclosure vulnerability exists in Texture versions 4.21.0.1 and earlier Android and 5.11.6 and earlier iOS. The vulnerability stems from errors such as configuration during operation of a networked system or product. An unauthorized...

Google Android Media framework APacketSource.cpp file remote code execution vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer error vulnerability exists in MakeMPG4VideoCodecSpecificData in the APacketSource.cpp file in Android. The vulnerability stems from a networked system or product performing operations in...

Google Android System spaces.h file out-of-bounds read vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An out-of-bounds read vulnerability exists in the Google Android System spaces.h file. The vulnerability stems from a networked system or product performing operations in memory without properly...

Plum Mobile Compass Input Validation Error Vulnerability

Plum Mobile Compass is an Android-based smartphone from Plum Mobile USA. The com.android.settings package in Plum Mobile Compass build fingerprint is PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys versionCode=23, versionName=6.0-eng.root.20161223.224055 contains a security...

CVE-2019-2038

In rwi93processsysinfo of rwi93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1...

The vulnerability of the sk_clone_lock function in Linux and Android operating systems allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the skclonelock function in Linux and Android operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Google Android Remote Code Execution Vulnerability (CNVD-2019-24164)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the Media framework in Android, which can be exploited by an attacker to potentially cause remote code execution without additional execution...

Google Android Information Disclosure Vulnerability (CNVD-2019-28870)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Android version 9, which stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the...

Google Android Information Disclosure Vulnerability (CNVD-2019-28876)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a networked system or product. An attacker could exploit th...

Google Android Memory Misreference Vulnerability (CNVD-2019-24141)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the Qualcomm closed-source component in Android. No details of the vulnerability are provided at this time...

Google Android Null Pointer Dereference Vulnerability (CNVD-2019-24155)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A null pointer dereference vulnerability exists in the Qualcomm closed source component in Android. An attacker can exploit this vulnerability to lock a memory region with incorrect authenticatio...

Google Android Privilege Permission and Access Control Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in System in Google Android versions 8.0, 8.1, and 9, which stems from a lack of effective permissions licensing and access control measures in a networked system ...

Google Android Information Disclosure Vulnerability (CNVD-2019-28877)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a networked system or product. An attacker could exploit th...

Goog Android elevation of privilege vulnerability (CNVD-2020-35897)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android suffers from an elevation of privilege vulnerability that stems from a lack of effective privilege licensing and access control measures in a networked system or product. There...