Google Android Qualcomm Kyro L2 driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an elevation of privilege vulnerability in the Qualcomm Kyro L2 driver implementation, which allows remote attackers to exploit the vulnerability to submit a special application with elevated...

Google Android Broadcom Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-04967)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Broadcom Wi-Fi driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-05713)

Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the implementation of the Mediaserver component, which allows remote attackers to exploit the vulnerability to build special applications that can crash the service process a...

Google Android Qualcomm Avtimer driver information disclosure vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an information disclosure vulnerability in the Qualcomm Avtimer driver implementation, which allows remote attackers to exploit the vulnerability by submitting a special application that can...

Google Android NVIDIA Crypto Driver Information Disclosure Vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An information disclosure vulnerability exists in Google Android NVIDIA Crypto Driver. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android Mediaserver Multiple Denial of Service Vulnerabilities（CVE-2017-0392）

VBRISeeker::CreateFromSource may cause an uncaught c++ exception due to trying to allocate a buffer where the size is attacker controllable. Fix: https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c PoC:...

Google Android Qualcomm Camera Driver Multiple Information Disclosure Vulnerabilities（CVE-2016-8413）

No description provided by source. include include include include include include include include include struct msmcamerav4l2ioctlt uint32t id; sizet len; int32t transcode; void user ioctlptr; ; define VIDIOCMSMCPPDEQUEUESTREAMBUFFINFO \ IOWR'V', BASEVIDIOCPRIVATE + 7, struct msmcamerav4l2ioctl...

Brave Browser iOS and Brave Browser Android Address Bar Spoofing Vulnerability

Brave Browser iOS and Brave Browser Android are both web browsers from Brave Software, USA. The former is for iOS; the latter is for Android. A security vulnerability exists in Brave Browser iOS versions prior to 1.2.18 and Brave Browser Android versions 1.9.56 and earlier. An attacker can exploi...

Google Android NFC elevation of privilege vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in Google Android NFC. An attacker can exploit this vulnerability to execute arbitrary code in a privileged process with...

Google Android MediaTek APK Elevation of Privilege Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek APK. An attacker can exploit this vulnerability to execute arbitrary code in the context of a...

Google Android - android.util.MemoryIntArray Ashmem Race Conditions

Google Android - android.util.MemoryIntArray Ashmem Race Conditions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1002 The MemoryIntArray class allows processes to share an in-memory array of integers by transferring an ashmem file descriptor. As the class implements the...

Google Android - Inter-process munmap in android.util.MemoryIntArray

Google Android - Inter-process munmap in android.util.MemoryIntArray Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1001 The MemoryIntArray class allows processes to share an in-memory array of integers by transferring an ashmem file descriptor. As the class implements the...

Google Android Qualcomm Sound Driver Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain potentially sensitive information, and the...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-01552)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from an information disclosure vulnerability. Attackers use the vulnerability to obtain sensitive information and launch further attacks...

Google Android Framework APIs Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android Framework APIs. Attackers use this vulnerability to obtain sensitive information and launch further attacks...

Google Android Filesystem Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android Filesystem. Attackers can use this vulnerability to obtain sensitive information and launch further attacks...

Google Android libgdx Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android libgdx. An attacker could exploit this vulnerability to execute arbitrary code in an affected application...

Google Android - rkp_set_init_page_ro RKP Memory Corruption Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=984 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...

Google Android - RKP Information Disclosure via s2-remapping Physical Ranges Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=982 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...

Google Android - RKP Information Disclosure via s2-remapping Physical Ranges

Google Android - RKP Information Disclosure via s2-remapping Physical Ranges Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=982 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant...