UBUNTU-CVE-2016-8479

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

UBUNTU-CVE-2017-0503

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

UBUNTU-CVE-2017-0337

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2017-0502

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

Linux kernel DCCP double-free vulnerability（CVE-2017-6074）

This is an announcement about CVE-2017-6074 1 which is a double-free vulnerability I found in the Linux kernel. It can be exploited to gain kernel code execution from an unprivileged processes. Fixed on Feb 17, 2017:...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s sound driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Qualcomm’s Android operating system’s crypto driver is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the kernel context...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “highly critical” because it...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “critical” due to th...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MediaTek driver for the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is considered “high” because i...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01584)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus Broadcom Wi-Fi Driver elevation of privilege vulnerability (CNVD-2017-01497)

Android on Nexus 6P, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Nexus 6P smart device, etc. The Broadcom Wi-Fi Driver is a Wi-Fi driver module developed by Broadcom that is used in the Nexus 6P. Broadcom Wi-Fi Driver is a Wi-Fi...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01582)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...