51 matches found
CVE-2017-2490
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...
Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-00538)
Google Android is an operating system developed by Google for smartphones. A security vulnerability in the Google Android MediaTek component allows remote attackers to exploit the vulnerability to elevate privileges through specially crafted applications...
Google Nexus Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability
Google Android is an operating system developed by Google for smartphones. A security vulnerability in the Google Nexus Broadcom Wi-Fi driver allows remote attackers to exploit the vulnerability via a specially crafted application that can elevate privileges...
Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00529)
Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability to gain access to sensitive information through specially crafted applications...
Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00530)
Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability to gain access to sensitive information through specially crafted applications...
CVE-2016-6685
The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30402628...
CVE-2016-4750
S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4777
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...
CVE-2016-4656
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Multiple buffer overflow vulnerabilities in Android on Nexus devices
Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from multiple buffer overflow vulnerabilities that allow attackers to gain privileges via a crafted application...
CVE-2014-9872
The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...
CVE-2014-9872
The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...
CVE-2016-3833
The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGEUSERS and CREATEUSERS permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka internal bug 29189712...
CVE-2016-2497
services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to increase intent-filter priority via a crafted application, aka internal bug 27450489...
The vulnerability of the Android operating system, which allows a hacker to bypass the security mechanisms of a isolated execution environment
The vulnerability of the libs/binder/Parcel.cpp file in the Parcels software interface of the Android operating system is related to the lack of checking for the return value of system calls. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms of isolated...
Android MediaTek driver boost vulnerability (CNVD-2016-04827)
Android on Android One is an open source Linux-based operating system for Android One smartphones developed by Google and the Open Handset Alliance OHA in the U.S. MediaTek drivers are a MediaTek device-specific component of MediaTek. MediaTek drivers is a MediaTek driver component for MediaTek...
CVE-2016-3812
The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28174833 and MediaTek internal bug ALPS02688832...
CVE-2016-2498
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 2013 devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162...
CVE-2016-1829
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828,...
Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions
The vulnerability of the kernels in iOS and Mac OS X operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...