6406 matches found
Cisco Nexus Series Switches CLI Command Injection Vulnerability
A vulnerability in the CLI of Cisco NX-OS System Software running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this...
Cisco Nexus Series Switches Telnet CLI Command Injection Vulnerability
A vulnerability in the Telnet CLI command of Cisco NX-OS System Software running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...
CVE-2017-0630
An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...
Google Nexus 9 SensorHub Firmware Downgrade Vulnerability(CVE-2017-0582)
Product Google Nexus 9 Vulnerable Version Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloader 3.50.0.0143. Mitigation Install N4F27B or later bootloader version 3.50.0.0143. Technical Details The Nexus 9 device contains a SoC manufactured by Cywee which implements a “Sensor...
Google Nexus 9 Cypress SAR Firmware Injection via I2C(CVE-2017-0563)
Product Google Nexus 9 Vulnerable Version Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloader 3.50.0.0143. Mitigation Install N4F27B or later bootloader version 3.50.0.0143. Technical Details The Nexus 9 device contains a sensor SoC manufactured by Cypress. The sensor is manag...
Google Nexus Synaptics Touchscreen Firmware Injection(CVE-2017-0433)
Products Nexus 6P Nexus 9 Android One Pixel Pixel XL Vulnerable Versions Verified on Nexus 9 6.0.1/MOB30W Verified on Nexus 9 7.0/NRD90M Technical Details Due to lenient SELinux and DAC policy, vulnerable Synaptics DSX touchscreen driver sysfs file entires are exposed to an attacker that executes...
Google Android Qualcomm crypto engine driver information disclosure vulnerability
Androidon Nexus5X etc. is a set of open source operating system running on Nexus5X etc. smart devices and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm crypto engine driver is one of the... Qualcomm crypto engine driver. An information disclosure...
Google Android Kernel Trace Subsystem Information Disclosure Vulnerability
Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X and other smart devices. kernel trace subsystem is a component of the kernel trace system that is used in it. An information disclosure vulnerability exists in...
Google Nexus 9 SensorHub Firmware Downgrade Vulnerability
Exploit for Android platform in category remote exploits Title: ==== Google Nexus 9 SensorHub Firmware Downgrade Vulnerability Identifier: ======== CVE-2017-0582 Product: ======= Google Nexus 9 Vulnerable Version: ================ Nexus 9 Android Builds before N4F27B - May 2017, i.e. before...
Google Nexus 9 Cypress SAR Firmware Injection via I2C Vulnerability
Exploit for Android platform in category remote exploits Title: ==== Google Nexus 9 Cypress SAR Firmware Injection via I2C Identifier: ======== CVE-2017-0563 Product: ======= Google Nexus 9 Vulnerable Version: ================ Nexus 9 Android Builds before N4F27B - May 2017, i.e. before bootloade...
Multiple Google Devices Qualcomm Camera Driver Information Disclosure Vulnerabilities
Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a Qualcomm-developed sound driver used in the Nexus 5X. Qualcomm Sound Driver is a sound driver developed by Qualcomm. An...
Google Android Qualcomm Secure Execution Environment Communicator Driver Elevation of Privilege Vulnerability
Android on Nexus 5X, etc. is an open source Linux-based operating system for Nexus 5X and other smart devices developed by Google and the Open Handheld Alliance OHA.The Qualcomm Secure Execution Environment QSE is an interface used to provide communication between the user space and the Qualcomm...
Android Qualcomm sound driver elevation of privilege vulnerability
Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a sound driver developed by Qualcomm that is used on the Nexus 5X. Qualcomm sound driver is a sound driver developed by Qualcom...
Android Qualcomm camera driver information disclosure vulnerability
Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...
Android Qualcomm sound driver elevation of privilege vulnerability (CNVD-2017-06115)
Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm sound driver is a Qualcomm sound driver used in the Nexus 5X. Qualcomm sound driver is a sound driver developed by Qualcomm. The Qualcomm sound...
Google Patches 6 Critical Android Mediaserver Bugs in May Security Update
In Brief Google has released its monthly security patches for Android this week, addressing 17 critical vulnerabilities, 6 of which affect Android Mediaserver component that could be used to execute malicious code remotely. Besides patches for Mediaserver, Google also fixed 4 critical...
Google Patches Six Critical Mediaserver Bugs in Android
Google pushed out its monthly Android patches Monday, addressing 17 critical vulnerabilities, six of which are tied to its problematic Mediaserver component. An additional four critical vulnerabilities related to Qualcomm components in Android handsets including Google’s own Nexus 6P, Pixel XL an...
Android Security Bulletin—May 2017Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Google device firmware images have also been released to the Google Developer...
Google Nexus Qualcomm TrustZone Information Disclosure Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm TrustZone is a system-wide security technology. An information disclosure vulnerability exists in Google Nexus Qualcomm TrustZone. An attacker could exploit this...
