4378 matches found
UBUNTU-CVE-2016-2494
Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28085658...
CVE-2016-2467
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010...
The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions
The vulnerability in the server/TetherController.cpp file of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created application...
NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS Arbitrary API Execution Vulnerability
NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS is a suite of Android and iOS-based applications from NTT Broadband Platform Japan for finding and automatically connecting to nearby free Wi-Fi in Japan. It is a set of Android and iOS based applications for NTT Broadband...
Lenovo SHAREit Cross-Site Scripting Vulnerability
Lenovo SHAREit 茄子快传 on Android is a set of file-sharing software based on the Android platform by the Chinese company Lenovo Lenovo. A cross-site scripting vulnerability exists in versions of Lenovo SHAREit prior to 3.5.98ww, which is based on the Android platform prior to version 4.4. A remote...
CVE-2016-4783
Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...
The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Android operating system exists due to the lack of restrictions on the number of threads. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted media file...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the codecs/on2/enc/SoftVPXEncoder.cpp function in the libstagefright component of the mediaserver in the Android operating system is related to the lack of checks for the size of the OMX buffer. Exploiting this vulnerability can allow a malicious actor to enhance their...
The vulnerability of the Android operating system, which allows a hacker to replace the authentication message
The vulnerability of the OpenSSL Cipher.java function in the Conscrypt component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to substitute the authentication message remotely...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of NVIDIA’s Android operating system video driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the Android operating system’s media server is related to the improper initialization of certain data structures. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially created application, which is associated with the...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Qualcomm TrustZone-based Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability in the media/libmedia/IDrm.cpp component of the Android operating system fails to initialize the data structure for the key request. Exploiting this vulnerability could allow a malicious actor to obtain confidential information or bypass security mechanisms...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability in the libs/gui/BufferQueueConsumer.cpp component of the Android media server does not check the permission android.permission.DUMP. Exploiting this vulnerability may allow a remote attacker to obtain confidential information or bypass security mechanisms...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability of the media/libmedia/IOMX.cpp component in the Android operating system’s media server fails to initialize the parameter data structure. Exploiting this vulnerability can allow a remote attacker to obtain confidential information or bypass security mechanisms...
CVE-2016-2459
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and...