CVE-2016-2307

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file...

Android Security Bulletin—October 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

CVE-2016-3927

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244...

CVE-2016-3926

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953...

Google Android 5.0 < 5.1.1 - 'Stagefright' .MP4 tx3g Integer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Android Stagefright MP4 tx3g Integer Overflow", 'Description' = %q This module exploits a integer overflow vulnerability in the...

Google to Launch 'Andromeda OS' — An Android-Chrome OS Hybrid

Google's long-rumored Android-Chrome hybrid operating system is expected to debut at the company's upcoming hardware event on October 4. The company has been working to merge the two OSes for roughly 3 years with a release planned for 2017, but an "early version" to show things off to the world i...

Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains

Apple isn’t the only one offering up a $200,000 reward for severe vulnerabilities on mobile devices. Google followed suit yesterday with the announcement of the Project Zero Prize, and like the Apple Security Bounty, the top payout is $200,000. Announced by Google’s Project Zero research team, th...

The Project Zero Contest — Google will Pay you $200,000 to Hack Android OS

Why waiting for researchers and bug hunters to know vulnerabilities in your products, when you can just throw a contest for that. Google has launched its own Android hacking contest with the first prize winner receiving $200,000 in cash. That's a Hefty Sum! The contest is a way to find and destro...

Cisco Nexus 3000 / 9000 Series GNU C Library (glibc) getaddrinfo() RCE (cisco-sa-20160218-glibc)

The version of Cisco NX-OS software running on the remote device is affected by a remote code execution vulnerability in the bundled version of the GNU C Library glibc due to a stack-based buffer overflow condition in the DNS resolver. An unauthenticated, remote attacker can exploit this, via a...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...

Android Qualcomm DMA Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in the Qualcomm sound/soc/codecs/wcdcal-hwdep.c/wcdcalhwdepioctlshared function on Nexus 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remot...

Google Android Qualcomm Camera Driver Elevation of Privilege Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. The Qualcomm Camera Driver is a Qualcomm-developed camera driver that is used in the Nexus 5X. Qualcomm Camera Driver is a camera driver developed...

Google Android Qualcomm IPA Driver Elevation of Privilege Vulnerability

Android on Nexus 5X and 6P is a Linux-based open source operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handset Alliance OHA, with the Qualcomm IPA driver as one of the network gas pedal components. An elevation of privilege vulnerability exists in the Qualco...

Google Nexus NVIDIA kernel elevation of privilege vulnerability

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handheld Alliance OHA, with the NVIDIA kernel as one of the NVIDIA kernel components. An elevation of privilege vulnerability exists in the NVIDIA kernel in versions of Android...

Google Android Synaptics Touchscreen Driver Elevation of Privilege Vulnerability

Android on Nexus 5X and 9 is an open source Linux-based operating system for the Nexus 5X smartphone and 9 tablet developed by Google and the Open Handheld Alliance OHA.Synaptics touchscreen driver is one of the Synaptics touchscreen driver is one of the An elevation of privilege vulnerability...

Google Android Qualcomm Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in versions of Android prior to...

Google Android Qualcomm power driver elevation of privilege vulnerability

Android on Nexus 5X and 6P is a Linux-based open source operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm power driver is a Qualcomm power connectivity driver component. Qualcomm power driver is a Qualcomm power connection driver...

Google Android Qualcomm Wireless Interface Layer Elevation of Privilege Vulnerability

Android on Nexus 5, 5X, 6, 6P, and Android One is a Linux-based open source operating system for the Nexus 5, 5X, 6, 6P, and Android One smartphones developed by Google and the Open Handset Alliance OHA. The Qualcomm radio interface layer is one of the radio interface layers RIL between the Andro...

Google Android Qualcomm Driver Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A buffer overflow vulnerability exists in the drivers/soc/qcom/subsystemrestart.c file in the...

Android Qualcomm DMA Component Information Disclosure Vulnerability (CNVD-2016-07470)

Android is a cell phone operating system based on the Linux open kernel. On Nexus 6 devices, an information disclosure vulnerability exists in the Qualcomm DMA component in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker with a constructed application to cause...