Privilege escalation

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101...

CVE-2014-9955

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686...

CVE-2017-13250

In ih264dfmtconv420spto420p of ih264dutils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This could lead to an remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product:...

CVE-2017-13256

In processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1,...

Design/Logic Flaw

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

CVE-2017-13283

In avrcctrlparsvendorrsp of bluetooth avrcpctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions...

Google Android System Elevation of Privilege Vulnerability (CNVD-2018-07452)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation vulnerability exists in the writeToParcel and readFromParcel of the PeriodicAdvertisingReport.java file in Android versions 8.0 and 8.1. A local attacker can exploit...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07666)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A stack buffer overflow vulnerability exists in the avrcparsbrowsingcmd file of the avrcparstg.cc file in Android versions 8.0 and 8.1, which stems from the program's failure to...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07449)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp in bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

CVE-2018-5824

In CVE-2018-5824, Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF-based Linux kernels prior to the 2018-04-05 patch level are vulnerable to a buffer overflow when processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages if the firmware tid value is out of r...

ESRI ArcGis Runtime SDK for Android Arbitrary Code Execution Vulnerability

ESRI ArcGis Runtime SDK for Android is a software development kit for building native mapping applications based on the Android platform. A security vulnerability exists in the ESRI ArcGis Runtime SDK for Android prior to version 10.2.6-2. The vulnerability can be exploited to execute arbitrary...

CVE-2017-14892

CVE-2017-14892 affects Android for MSM, Firefox OS for MSM, and QRD Android builds prior to 2017-09-19. The issue stems from not properly validating the return value of q6asm_open_shared_io() in msm_pcm_hw_params(), which can lead to a dangling pointer access. The available sources describe the v...

CVE-2018-8909

The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala...

Unspecified Vulnerability in Google Android Qualcomm Closed Source Component (CNVD-2018-07479)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android. No...

Google Android Qualcomm Wma elevation of privilege vulnerability (CNVD-2018-06009)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06007)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-05992)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google Android NVIDIA libnvrm Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.NVIDIA libnvrm is one of the code libraries for the NVIDIA Tegra products. An information disclosure vulnerability...

Samsung Display Solutions App for Android Man-in-the-Middle Attack Vulnerability

Samsung Display Solutions App for Android is an Android-based mobile application developed by Samsung South Korea for viewing Samsung display devices. A security vulnerability exists in versions of the Samsung Display Solutions App for Android prior to version 3.02, which arises from the program'...

Google Android System Component Information Disclosure Vulnerability (CNVD-2018-06621)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Google Android System component. An attacker can exploit the vulnerability to obtain sensitive information...