Mozilla Firefox Man-in-the-Middle Attack Vulnerability (CNVD-2019-08536)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 66 on the Android platform, which stems from the fact that Firefox can load libraries from the APITRACELIB location, and any user...

CVE-2019-9833

The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests...

CVE-2019-9600

The Olive Tree FTP Server aka com.theolivetree.ftpserver application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts and drops certain packets...

Google Android Stack Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A stack buffer overflow vulnerability exists in Core in Android. An attacker can exploit this vulnerability to cause memory corruption in the trustzone area...

Google Android Buffer Overflow Vulnerability (CNVD-2019-10464)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'btifdmdatacopy' function of the btifcore.cc file in Google Android, which can be exploited by remote attackers to execute cod...

CVE-2018-9590

In addattr of sdpdiscovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...

CVE-2019-6447

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to...

CVE-2018-3986

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is ...

Vulnerability of the l2c_lcc_proc_pdu function in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the l2clccprocpdu function l2cfcr.cc in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the ihevcd_sao_shift_ctb function in the Android operating system allows a hacker to disclose protected information.

The vulnerability of the ihevcdsaoshiftctb function ihevcdsao.c in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the CAacDecoder_Init function in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the CAacDecoderInit function aacdecoder.cpp in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Google Android Access Privilege Control Vulnerability (CNVD-2019-24173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An access control error vulnerability exists in Yocto in Android. An attacker can exploit the vulnerability to modify properties...

Google Android Qualcomm WLAN Host Component Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Qualcomm WLAN Host is a wireless LAN component. A security vulnerability exists in the Qualcomm WLAN Host component of Android. An attacker can exploit this vulnerability to cause...

Google Android Qualcomm Automotive Multimedia Component Override Access Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Automotive multimedia is a Qualcomm automotive multimedia component used in it. A security vulnerability exists in the Qualcomm Automotive Multimedia component of Android. A...

Google Android Qualcomm GPS_AP_LINUX component override access vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm GPSAPLINUX is a GPS positioning component. A security vulnerability exists in the Qualcomm GPSAPLINUX component in Android. A remote attacker can exploit the...

Google Android integer overflow vulnerability (CNVD-2019-01769)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An integer overflow vulnerability exists in readBytes in xltdecwbxml.c in Google Android. An attacker can exploit this vulnerability to cause an out-of-bounds read, which...

Google Android elevation of privilege vulnerability (CNVD-2018-26777)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the V4L2SliceVideoDecodeAccelerator::Dequeue in the v4l2slicevideodecodeaccelerator.cc file in Android versions 8.1 and 9, which...

Google Android Information Disclosure Vulnerability (CNVD-2018-26776)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in several functions of the ContentProvider.java file in Android, which stems from the program's failure to verify URIs and can be...

Google Android out-of-bounds write vulnerability (CNVD-2019-01568)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An out-of-bounds write vulnerability exists in the persistsetkey and other functions of cryptfs.cpp in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. A local attacker...

Google Android out-of-bounds write vulnerability (CNVD-2019-01562)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the 'lppTransposer' function of the lpptran.cpp file in Android, which stems from a lack of boundary detection in the program and ca...