Google Android MediaTek soc driver elevation of privilege vulnerability

Android is a free and open-source Linux-based operating system for mobile devices such as smartphones and tablets, led and developed by Google Inc. and the Open Handset Alliance. A security vulnerability in the Android MediaTek soc driver allows local attackers to exploit the vulnerability to...

CVE-2017-0828

An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android ID: A-34622855...

UBUNTU-CVE-2017-0807

An elevation of privilege vulnerability in the Android framework ui framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974...

Privilege escalation

An elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions: Android kernel. Android ID: A-34622855...

Privilege escalation

An elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-34949781...

UBUNTU-CVE-2017-0823

An information disclosure vulnerability in the Android system rild. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37896655...

CVE-2017-0818

The CVE-2017-0818 entry concerns the Android Media Framework vulnerability affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. The issue is described as a vulnerability in the Android media framework (component: Media Framework) with no explicit root-cause details in the provided docs. CVSSv3 base score...

UBUNTU-CVE-2015-1526

The mediaserver component in Android allows remote attackers to cause a denial of service via a crafted application...

The vulnerability of the multimedia framework of the Android operating system allows a perpetrator to gain access to protected data or execute arbitrary code.

The vulnerability of the multimedia framework of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected data or execute arbitrary code within a privileged process...

Hydrogen Krypton Travel App for Android suffers from an override access vulnerability

Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. The vulnerability exists in "My Wallet" and "My Orders" in the Android version of Hydrogen Krypton Mobility APP, which allows an attacker to view any user's details by using their cell phone numbe...

Vivo Bike Share Android App Has Logic Design Flaws

Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

Facebook WhatsApp Messenger for Android Vulnerability Local Message Disclosure Vulnerability

Facebook WhatsApp Messenger for Android is a suite of mobile applications from Facebook, Inc. in the United States based on the Android platform that utilize the web to send text messages. The application uses the contact information in the smartphone to find contacts using the program to send...

The vulnerability of the Android operating system’s IOCTL handler from the SAF repository, which allows a attacker to trigger a numerical overflow and write beyond the memory boundaries.

The vulnerability of the Android operating system’s IOCTL handler from the CAF repository arises due to synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability can allow an attacker to trigger a full memory overflow and write beyond the memory...

Wireless 'BlueBorne' Attacks Target Billions of Bluetooth Devices

Researchers disclosed a bevy of Bluetooth vulnerabilities Tuesday that threaten billions of devices from Android and Apple smartphones to millions of printers, smart TVs and IoT devices that use the short-range wireless protocol. Worse, according to researchers at IoT security firm Armis that fou...

CVE-2017-0801

A elevation of privilege vulnerability in the MediaTek libmtkomxvdec. Product: Android. Versions: Android kernel. Android ID: A-38447970. References: M-ALPS03337980...

CVE-2017-0766

A remote code execution vulnerability in the Android media framework libjhead. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688...

CVE-2017-0787

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit this...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31744)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31740)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...