Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=497 Loading the bitmap bmpmemset.bmp can cause a crash due to a memset writing out of bounds. I/DEBUG 2961: pid: 12383, tid: 12549, name: thread-pool-1 com.sec.android.gallery3d I/DEBUG 2961: signal 11 SIGSEGV, code 2...

Samsung Galaxy S6 - libQjpeg DoIntegralUpsample Crash

Samsung Galaxy S6 - libQjpeg DoIntegralUpsample Crash Source: https://code.google.com/p/google-security-research/issues/detail?id=498 The attached jpg, upsample.jpg can cause memory corruption when media scanning occurs F/libc 8600: Fatal signal 11 SIGSEGV, code 1, fault addr 0x206e6f69747562 in...

Samsung Galaxy S6 - libQjpeg DoIntegralUpsample Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=498 The attached jpg, upsample.jpg can cause memory corruption when media scanning occurs F/libc 8600: Fatal signal 11 SIGSEGV, code 1, fault addr 0x206e6f69747562 in tid 8685 HEAVY0 I/DEBUG 2956: I/DEBUG 2956: Build...

Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge

Posted by Natalie Silvanovich, Planner of Bug Bashes Recently, Project Zero researched a popular Android phone, the Samsung Galaxy S6 Edge. We discovered and reported 11 high-impact security issues as a result. This post discusses our motivations behind the research, our approach in looking for...

Samsung S4 GT-I9500 Memory Corruption Vulnerability

The Samsung S4 GT-I9500 is a smartphone released by the South Korean company Samsung. The 's3cfbextdspioctl' in the drivers/video/samsungextdisp/s3cfbextdspops.c file of the Samsung S4 GT-I9500 I9500XXUEMK8 release A memory corruption vulnerability exists in the function, allowing a local attacke...

Samsung S4 GT-I9500 Information Disclosure Vulnerability

The Samsung S4 GT-I9500 is a smartphone released by the South Korean company Samsung. The 's3cfbextdspioctl' in the drivers/video/samsungextdisp/s3cfbextdspops.c file of the Samsung S4 GT-I9500 I9500XXUEMK8 release function has an information disclosure vulnerability that could be exploited by a...

How to Install Android 6.0 Marshmallow and When will Your Smartphone Get it?

Google is eager to release the latest version of its mobile operating system, Android 6.0 Marshmallow, to some of its Smartphone and Tablet lineup. The latest Android 6.0 Marshmallow update brings a whole host of new features, including Doze mode, App permissions, Google Now on Tap, "Do not...

Design/Logic Flaw

The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object...

CVE-2015-4034

The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object...

CVE-2015-4034

Affected software/impact : Samsung Galaxy S5's com.absolute.android.persistence.MethodSpec class is vulnerable to remote code execution via crafted Parcelable objects. The root cause is in the createFromParcel deserialization flow, where dynamic class loading is performed without restricting the ...

Samsung Galaxy S5 Remote Code Execution Vulnerability

The Samsung Galaxy S5 is a smartphone released by the South Korean company Samsung Samsung. A remote code execution vulnerability exists in the com.absolute.android.persistence.MethodSpec class of the Samsung Galaxy S5, which stems from the program's failure to properly restrict the origin of...

Directory Traversal Vulnerability in Multiple Samsung Galaxy Devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A directory traversal vulnerability exists in the SwiftKey language-pack upgrade implementation of multiple Samsung Galaxy devices. A remote attacker can leverage the control privileges...

Man-in-the-middle attack vulnerability in multiple Samsung Galaxy devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A security vulnerability exists in the SwiftKey language-pack upgrade implementation process for several Samsung Galaxy devices. As the program uses HTTP to connect to the...

(0Day) (Mobile Pwn2Own) Samsung Galaxy S5 MethodSpec Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Samsung Galaxy S5s. Authentication is not required to exploit this vulnerability. The specific flaw exists within the com.absolute.android.persistence.MethodSpec Class. The createFromParcel method performs dynamic...

Samsung Galaxy S Mobile Phone Remote Code Execution Vulnerability

Samsung Galaxy is a series of mid-range and high-end smartphones from Samsung.Swiftkey keyboard is a keyboard application that comes pre-installed with system privileges on Galaxy S series phones. Samsung Galaxy S4 Mini, S4, S5, S6 series smartphones fail to validate Swiftkey language pack...

CVE-2015-4641

Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the...

CVE-2015-4640

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

Code injection

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

Directory traversal

Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the...

CVE-2015-4640

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...