1440 matches found
Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices
Hundreds of millions of devices, especially Android smartphones and tablets, using Qualcomm chipsets, are vulnerable to a new set of potentially serious vulnerabilities. According to a report cybersecurity firm CheckPoint shared with The Hacker News, the flaws could allow attackers to steal...
Android Security Bulletin—November 2019Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-11-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Exploit for Use After Free in Google Android
CVE-2019-2215 The following issue exists in the android-msm-wa...
New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android. What's more? The Android zero-day vulnerability has also been found to be exploited in the wild by the Israeli surveillance vendor NSO...
Android - Binder Driver Use-After-Free Exploit
The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the upstream commit:...
CVE-2019-2191
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2190
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
Out-of-bounds
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2190
CVE-2019-2190 affects LG's LAF component in the Android kernel, where a missing bounds check in a protected disk partition can cause local information disclosure via USB. Exploitation requires user privileges but not user interaction. The vulnerability is documented across multiple sources (NVD, ...
CVE-2019-2191
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2190
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local information disclosure via USB with User execution privileges needed. User interaction is not required for exploitation.Product: AndroidVersions:...
CVE-2019-2191
CVE-2019-2191 affects LG’s LAF component, exposing information from a protected disk partition due to a missing bounds check. This permits local information disclosure via USB with no user interaction; exploitation requires user privileges and is possible without user action. The related Red Hat/...
Google Android LG Bootloader Information Disclosure Vulnerability (CNVD-2019-47022)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. LG Bootloader is one of the bootloaders. An information disclosure vulnerability exists in LG Bootloader in Android. The vulnerability stems from errors such as configuration during...
Hackers can break into Android devices by sending a text
By Sudais In the latest, researchers from Check Point have discovered vulnerabilities in certain Android-based phones including the likes of Samsung, Huawei, Sony, and LG which allows attackers to access your information. This is a post from HackRead.com Read the original post: Hackers can break...
Google Android LG Bootloader Mobilization Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. LG Bootloader is one of the bootloaders. An elevation of privilege vulnerability exists in LG Bootloader in Android. An attacker can exploit this vulnerability to elevate privileges...
Half of Android Handsets Susceptible to Clever SMS Phishing Attack
Over half of all Android handsets are susceptible to a clever over-the-air SMS phishing attack that could allow an adversary to route all internet traffic through a rogue proxy, as well as hijack features such as a handset’s homepage, mail server and directory servers for synchronizing contacts a...
Pixel Update Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2019-09-05 or later address all issues in this bulletin and all issues in the September 2019 Android...
Popular Samsung, LG Android Phones Open to 'Spearphone' Eavesdropping
A new way to eavesdrop on people’s mobile phone calls has come to light in the form of Spearphone – an attack that makes use of Android devices’ on-board accelerometers motion sensors to infer speech from the devices’ speakers. An acronym for “Speech privacy exploit via accelerometer-sensed...
Google July Android Security Bulletin Fixes 3 Critical RCE Bugs
Google has released fixes for three critical remote code execution bugs in the media framework of its Android operating system. These flaws could allow a remote attacker to execute arbitrary code. The flaws are part of Google’s July Android Security Bulletin, which included fixes for 12 critical...
