Google Android Qualcommr Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcommr Driver is a Qualcomm driver developed by Qualcomm. An elevation of privilege vulnerability exists in Qualcommr Driver in Android. A remote attacker can exploit this...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon Exploit

Exploit for Android platform in category dos / poc This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain...

Procter&Gamble Oral-B App for Android Privilege Gain Vulnerability

Procter&Gamble Oral-B App for Android is an Android-based electric toothbrush management app from Procter&Gamble. A security vulnerability exists in version 5.0.0 of the Procter&Gamble Oral-B App for Android, which stems from the program's use of AES encryption with static parameters. An attacker...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02174)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-00638)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media Framework in Android. A remote attacker could exploit th...

Two Sides App has an override access vulnerability

Two Sides APP is an emotional, psychological and fun social software launched by Beijing Two Sides Network Technology Co. Two Sides APP 3.0.28 Android version has an override access vulnerability, after logging in to the system, an attacker can log in to other users' systems and perform...

The vulnerability in the kgsl_ioctl_gpu_command function of the KGSL kernel driver for the Android operating system, found in the CAF repository, allows a malicious actor to execute arbitrary code within the context of a privileged process.

The vulnerability of the kgslioctlgpucommand function in the Kernel Graphics Support Layer of the Android operating system’s kernel, from the CAF repository, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the...

New Android vulnerability allows attackers to modify apps without affecting their signatures(CVE-2017-13156)

A serious vulnerability CVE-2017-13156 in Android allows attackers to modify the code in applications without affecting their signatures. The root of the problem is that a file can be a valid APK file and a valid DEX file at the same time. We have named it the Janus vulnerability, after the Roman...

Google Android Qualcomm component memory misreference vulnerability (CNVD-2017-38438)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A memory misreference vulnerability exists in the Google Android Qualcomm component. An...

Unspecified Vulnerability in Google Android Qualcomm Closed Source Component

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unspecified vulnerability exists in the Qualcomm closed-source component in Android, which stems...

UBUNTU-CVE-2017-13169

An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Android ID A-37512375...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-36931)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Display driver is a MediaTek-developed display driver component used in it. An elevation of privilege vulnerability exists in the Google Android MediaTek component. A...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2017-36939)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and NVIDIA mediaserver is a multimedia server component used in it. An elevation of privilege vulnerability exists in NVIDIA mediaserver in Android, which stems from a failure to properly...

Google Android WLAN Qualcomm Component Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-36940)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An integer overflow vulnerability exists in Qualcomm WLAN in Android. A remote attacker could exploit this vulnerability to execute cod...

Arbitrary Account Password Reset Vulnerability in Zhigao Cloud Air Conditioner App Android Version

Cloud air conditioning refers to intelligent air conditioning equipment that uses cloud computing technology to upgrade and manage existing applications on the basis of the core technology of refrigeration, which possesses many application advantages such as massive cloud service resources, remot...

Butler Smart App for Android is vulnerable to malicious bulk registrations

The Butler Smart App is a mobile application that goes along with the smart cat eye device. A malicious bulk registration vulnerability exists in Butler Smart APP for Android. An attacker can exploit the vulnerability to register accounts in bulk, leading to account abuse and consumption of servi...

Out-of-authority access vulnerability in Butler Smart App for Android

The Butler Smart App is a mobile application that goes along with the smart cat eye device. The Android version of Butler Smart APP suffers from an overstepping access vulnerability, which allows an attacker to log in to other users' systems and perform unauthorized operations by grabbing packets...

Google Android Qualcomm Services Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Services is a component. Qualcomm Services is a Qualcomm Services component developed by Qualcom...

Android Media framework libeffects Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libeffects being one of the multimedia effect libraries. libeffects is one of the multimedia...