Local Elevation of Privilege Vulnerability in Multiple Lenovo ThinkPad Products

ThinkPad 11e and others are laptop products from the Chinese company Lenovo.Realtek audio driver is one of the audio drivers released by Realtek. A local elevation of privilege vulnerability exists in the Realtek audio driver in several Lenovo ThinkPad products. A local attacker could exploit thi...

Privilege escalation

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges...

CVE-2017-3767

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges...

CVE-2017-3767

CVE-2017-3767 affects Lenovo ThinkPad systems via the Realtek audio driver. The vulnerability resides in Realtek audio driver versions before 6.0.1.8224, enabling a local attacker with privileges to execute code with administrative rights. The Lenovo advisory corroborates the local privilege esca...

CVE-2017-3767

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges...

Android Security Bulletin—November 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners were...

Out-of-bounds

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...

CVE-2017-11046

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...

CVE-2017-11046

CVE-2017-11046 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The issue arises when an audio driver ioctl handler is invoked, potentially triggering a kernel out-of-bounds write. Publicly available details in the connected sources reiterate the same r...

Google Android Qualcomm Audio Driver Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm audio driver, which can be exploited by an attacker to gain elevated privileges kernel...

CVE-2017-8278

In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31664)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit this...

Google Android Qualcomm Audio Driver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...

The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a stack overflow.

The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to select certain values in the user’s environment, which may lead to stack overflow...

The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a memory overflow in the buffer dynamic area.

The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a numerical overflow, followed by an overflow of the dynamic memory buffer. This occurs if the function name is too long...

The vulnerability of the Android CAF-release operating system’s audio driver allows a hacker to execute arbitrary code.

The vulnerability of the Android CAF-release operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to continue executing code even if the check for valid length values fails and an error message is...

The vulnerability of the audio driver function of the mobile application MSM for the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the audio driver function in the Android mobile application MSM is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full memory overflow, followed by a buffer overflow, if large values of certain variables are set ...

The vulnerability of the audio driver of the MSM mobile application for the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the audio driver in the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full overflow, followed by a buffer overflow, if the function name is long...

Code injection

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...