The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the STMicroelectronics operating system’s driver is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause a service failure or otherwise affect the system...

CVE-2017-0384

An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to...

CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

Remote code execution

A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses t...

CVE-2016-8430

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

UBUNTU-CVE-2017-0381

An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product:...

Privilege escalation

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8439

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...

Privilege escalation

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6784

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android I...

CVE-2016-6783

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android I...

CVE-2016-8396

An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android...

CVE-2016-6770

An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4,...

Unspecified vulnerability in Google Android Qualcomm component (CNVD-2017-02544)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. Google Android has an unspecified vulnerability. An attacker can exploit the vulnerability to perfo...

Unspecified vulnerability in Google Android Qualcomm component (CNVD-2017-02492)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. Google Android has an unspecified vulnerability. An attacker can exploit the vulnerability to perfo...

Google Nexus Broadcom Wi-Fi Driver elevation of privilege vulnerability (CNVD-2017-00574)

Android on Nexus 6P, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Nexus 6P smart device, etc. The Broadcom Wi-Fi Driver is a Wi-Fi driver module developed by Broadcom that is used in the Nexus 6P. Broadcom Wi-Fi Driver is a Wi-Fi...

Design flaws in the Android version of the Far Eastern Express app client

Yuancheng Express app is a life service application, a mobile logistics platform. There is a design vulnerability in the Far Cheng Express app client for Android. Due to the digest digest algorithm can be cracked, allowing an attacker to exploit the vulnerability to reset the password of any user...

Google Android elevation of privilege vulnerability (CNVD-2017-00160)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Android on multiple Google devices contains an elevated privilege vulnerability. A remote attacker can exploit the vulnerability to gain elevated privileges...

Google Android Local Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from a local information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...