CVE-2018-9143

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

Buffer overflow

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

Heap overflow

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

CVE-2018-9139

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

CVE-2018-9143

On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...

CVE-2018-9139: Improper Restriction of Operations within the Bounds of a Memory Buffer

On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06661)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06664)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06665)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06666)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06662)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06663)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

The vulnerability of the Android operating system’s libhevc library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libhevc library arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process remotely...

Vulnerability of the `ihevcd_allocate_static_bufs` and `ihevcd_create` functions in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ihevcdallocatestaticbufs and ihevcdcreate/media/libstagefright/codecs/hevcdec/SoftHEVC.cpp functions in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process from a remote location...

The vulnerability of the MediaTek CCCI driver for the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the MediaTek CCCI driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute arbitrary code within a privileged process...

The vulnerability of the Android operating system’s libutils library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libutils library is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process, using a specially crafted file...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a perpetrator to execute arbitrary code within the context of a privileged process using a specially crafted file...

CVE-2017-6258

NVIDIA libnvmmliteaudio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-38027496...

CVE-2018-6593

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...