44 matches found
EUVD-2016-4866
Malware in sbrugna...
EUVD-2014-7772
Malware in sbrugna...
EUVD-2022-6540
Malicious code in bioql PyPI...
EUVD-2022-25078
Malicious code in bioql PyPI...
CVE-2022-1799
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...
CVE-2022-2390
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
Gmail's New Shielded Email Feature Lets Users Create Aliases for Email Privacy
Google appears to be readying a new feature called Shielded Email that allows users to create email aliases when signing up for online services and better combat spam. The feature was first reported by Android Authority last week following a teardown of the latest version of Google Play Services...
Google Play Services SDK leads to apps having incorrectly set mutability flag
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
com.google.android.gms:play-services (11.4.2), com.google.android.gms:play-services-ads (11.4.2) +56 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (11.4.2)
com.google.android.gms:play-services-basement MAVEN version 11.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services 11.4.2 -...
com.google.android.gms:play-services-ads (>=16.0.0, <=17.2.1), com.google.android.gms:play-services-ads-identifier (16.0.0) +102 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (16.0.1)
com.google.android.gms:play-services-basement MAVEN version 16.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.android.gms:play-services-basement and may be impacted: - com.google.android.gms:play-services-ads =16.0.0, =16.0.0, =16.0.4,...
androidx.camera:camera-mlkit-vision (>=1.2.0-alpha01, <=1.6.0-beta01), androidx.core.uwb:uwb (>=1.0.0-alpha01, <=1.0.0-alpha11) +184 more potentially affected by CVE-2022-2390 via com.google.android.gms:play-services-basement (>=18.0.0, <=18.0.1)
com.google.android.gms:play-services-basement MAVEN version =18.0.0, =1.2.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha02, =1.1.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =1.0.0-alpha02, =3.26.0, =4.7.1.1, =11.4.2.0, =8.4.3.1, =6.11.0.1, =8.1.3.1, =8.2.4.0 and more Source cves: CVE-2022-2390 Source...
CVE-2022-2390
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
Code injection
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
CVE-2022-2390
CVE-2022-2390 affects the Google Play Services SDK. The issue stems from the mutability flag on PendingIntents passed to the Notification service, present in SDKs prior to version 18.0.2. This misconfiguration can allow an attacker to access all non-exported providers and/or other providers for w...
CVE-2022-2390 Mutable pending intent in Google Play services SDK
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
CVE-2022-2390
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
CVE-2022-2390 Mutable pending intent in Google Play services SDK
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
CVE-2022-2390: Modification of Assumed-Immutable Data (MAID)
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...
Google Play Services security vulnerabilities
Google Play services is used by Google Inc. to update Google apps and other applications provided by Google Play. A security vulnerability exists in the Google Play Services SDK that stems from an application incorrectly setting the variability flag to PendingIntents and passing it to the...
PT-2022-16319 · Google · Google Play Services Sdk
Name of the Vulnerable Software and Affected Versions: Google Play Services SDK versions prior to 18.0.2 Description: The issue arises from the incorrect setting of the mutability flag in PendingIntents passed to the Notification service in apps developed with the Google Play Services SDK. This b...