Android Denial of Service Vulnerability (CNVD-2015-06581)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows remote attackers to execute arbitrary code or cause a denial of service...

Android elevation of privilege vulnerability (CNVD-2015-06568)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An elevation of privilege vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows an attacker to gain privileges through a crafted application...

CVE-2015-3875

libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted audio file, aka internal bug 22952485...

CVE-2015-6606

CVE-2015-6606 affects the Secure Element Evaluation Kit (SEEK/SmartCard API) plugin in Android up to 5.1.1 LMY48T. The flaw allows a crafted application to gain elevated privileges (Signature or SignatureOrSystem) due to a code-injection flaw in SEEK, enabling privilege escalation. Affected: SEEK...

CVE-2015-3875

CVE-2015-3875 affects libutils in Android before 5.1.1 LMY48T. A crafted audio file can cause memory corruption, enabling remote code execution or a denial of service. Root cause: memory corruption in libutils exploited via crafted audio input. Impact is high; mitigation is to upgrade Android to ...

Android Security Restriction Bypass Vulnerability (CNVD-2015-06576)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in LMY48I, a version of Android prior to 5.1.1. Allows an attacker to trigger a faulty process load via a crafted...

Android Security Restriction Bypass Vulnerability (CNVD-2015-06603)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in Android versions prior to 5.1.1, LMY48I. This allows an attacker to bypass the target getRecentTasks restriction and...

Android Security Restriction Bypass Vulnerability (CNVD-2015-06575)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in LMY48I, a version of Android prior to 5.1.1. Allows an attacker to intercept or simulate an unspecified phone STK SIM...

Android integer overflow vulnerability (CNVD-2015-06484)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in Android versions prior to 5.1.1, LMY48M, which allows an attacker to execute arbitrary code and read arbitrary keys. By using an...

Android Arbitrary Code Execution Vulnerability

Android is an operating system based on the Linux open kernel. Android has been disclosed to have an arbitrary code execution vulnerability that allows remote attackers to execute arbitrary code via metadata in specially crafted MP3 or MP4 files...

Android elevation of privilege vulnerability (CNVD-2015-06528)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An elevation of privilege vulnerability exists in LMY48I, a version of Android prior to 5.1.1, which allows an attacker to gain privileges to a URI via an application that...

Android elevation of privilege vulnerability (CNVD-2015-06579)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An elevation of privilege vulnerability exists in LMY48M, a version of Android prior to 5.1.1. It allows an attacker to gain access to different application privileges...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2014-7915

The CVE relates to an integer overflow in SampleTable.cpp of Android’s libstagefright (Android before 5.0.0; some references extend to related 4.x/5.x lines). The root cause is an integer overflow in SampleTable.cpp in libstagefright, leading to unspecified impact per early descriptions, with fol...

Google Android integer overflow vulnerability (CNVD-2015-06217)

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android suffers from an integer overflow vulnerability in its implementation, which can be exploited by an attacker to elevate privileges...

Google Android integer overflow vulnerability (CNVD-2015-06215)

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android suffers from an integer overflow vulnerability in its implementation, which can be exploited by an attacker to elevate privileges...

Google Android SMS and MMS Message Tampering Vulnerability

Google Android is an open source operating system based on Linux, mainly used in portable devices. A security vulnerability exists in Google Android, which allows malicious applications to exploit the vulnerability to tamper with the sending and receiving status of SMS and MMS messages to carry o...

Google Android Integer Overflow Vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android suffers from an integer overflow vulnerability due to the program failing to properly check user-supplied data. An attacker is allowed to...

"Certifi-Gate" Android Vulnerability Lets Hackers Take Complete Control of Your Device

Android users are busy fighting with Stagefright vulnerability while the popular mobile operating system faces another critical security vulnerability, dubbed as “Certifi-Gate”. Millions of Android devices could be hacked exploiting a plugin that comes pre-installed on your Android devices by the...

Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05029)

Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...