PT-2016-3537

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue allows attackers to bypass intended access restrictions via a crafted boot image due to the lack of validation of the page size in the kernel header in th...

CVE-2014-9784: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...

CVE-2014-9781: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471...

CVE-2014-9782: Undefined Security Weakness

drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug...

CVE-2014-9793: Undefined Security Weakness

platform/msmshared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567...

CVE-2014-9799: Undefined Security Weakness

The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protectio...

CVE-2014-9779: Undefined Security Weakness

arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679...

Field Trip - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Field Trip published at the 'play' market has multiple vulnerabilities...

Time2Work - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Time2Work published at the 'play' market has multiple vulnerabilities...

절대시계 위젯 - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application 절대시계 위젯 published at the 'play' market has multiple vulnerabilities...

PrivateWave Professional - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PrivateWave Professional published at the 'play' market has multiple vulnerabilities...

UniNow - Die App für's Studium - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application UniNow - Die App für's Studium published at the 'play' market has multiple vulnerabilities...

FTPServer - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application FTPServer published at the 'play' market has multiple vulnerabilities...

Java Platform Data Compromise

The vulnerability of the Java SE and Java SE Embedded software platform allows a remote attacker to compromise data integrity by using subcomponents called Libraries...

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using subcomponents called Libraries...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to JavaFX components. Exploiting this vulnerability allows an attacker to compromise data confidentiality and integrity by using JavaFX components...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program components. Exploitation of this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data by using these component libraries...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the 2D component...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to JavaFX components. Exploiting this vulnerability allows an attacker to manipulate data accessibility by using JavaFX components...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows an unauthorized attacker to compromise the confidentiality, integrity, and accessibility of data by using the Networking component...