22 matches found
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
PT-2026-132389
Name of the Vulnerable Software and Affected Versions Shelter version 445 Description An issue allows attackers to register their own auth key, enabling the takeover of another user's binder service API and preference state. This allows an attacker to gain control over the API access and preferen...
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
CVE-2026-107058
An issue in Shelter (versionCode 445 ) allows attackers to register their own auth_key , leading to the takeover of another user's binder service API and preference state . The root cause is categorized as Improper Authentication (CWE-287). No specific remediation or exploit details are provided ...
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
EUVD-2026-113256
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
Samsung InputManagerService Unauthorized Access Vulnerability
Samsung InputManagerService is a service for Samsung SAMSUNG mobile devices, a service that Android abstracts in order to handle various user operations, itself can be seen as a Binder service entity, instantiated when the SystemServer process is started and registered to the An unauthorized acce...
Samsung Mobile Devices InputManagerService security vulnerability
Samsung InputManagerService is a service for Samsung SAMSUNG mobile devices, a service that Android abstracts in order to handle various user operations, itself can be seen as a Binder service entity, instantiated when the SystemServer process is started and registered to the An unauthorized acce...
Heap overflow
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9143
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9143
CVE-2018-9143 affects Samsung mobile devices running Android M (6.0) and N (7.x). The vulnerability is a heap overflow in the sensorhub binder service, allowing code execution in a privileged process (SVE-2017-10991). Impact is rated high/critical (C/H/I/A) per NVD metrics. No exploitation detail...
CVE-2018-9143: Out-of-bounds Write
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
Android - 'getpidcon' Permission Bypass in KeyStore Service
The keystore binder service "android.security.IKeystoreService" allows users to issue several commands related to key management, including adding, removing, exporting and generating cryptographic keys. The service is accessible to many SELinux contexts, including application contexts, but also...
PT-2017-3627
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 and N7.x software Description: A heap overflow in the sensorhub binder service can lead to code execution in a privileged process. This issue is caused by a buffer overflow in memory, which can be exploited by...
Android HDCP Denial of Service Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android HDCP denial-of-service vulnerability exists because the encrypt interface provided by the HDCP service High-bandwidth Digital Content Protection does not perform strict paramet...
LG G4 - lgdrmserver Binder Service Multiple Race Conditions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In several places, these handles are retrieved from a...
LG G4 - lgdrmserver Binder Service Multiple Race Conditions Vulnerability
Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In...
LG G4 - lghashstorageserver Directory Traversal
LG G4 - lghashstorageserver Directory Traversal Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes fr...
Android tlc_server Heap Overflow Vulnerability
Android suffers from a heap overflow vulnerability in the tlcserver via the LOADTUIRESOURCE command. Android: Heap-overflow in "tlcserver" via LOADTUIRESOURCE command As a part of the TrustZone framework available on Samsung devices, Samsung provides an Android daemon which enables communication...
Samsung Devices KNOX Extensions - OTP Service Heap Overflow
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=935 As a part of the KNOX extensions available on Samsung devices, Samsung provides a new service which allows the generation of OTP tokens. The tokens themselves are generated in a TrustZone application within the TEE UID:...