722 matches found
CVE-2018-6593
An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...
The vulnerability of the NVIDIA graphics processor driver for the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of NVIDIA’s graphics driver gm20bclkthrotsetcdevstate in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within a privileged process...
CVE-2017-13208
In receivepacket of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation...
Heap overflow
In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android kernel...
Remote code execution
In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....
CVE-2017-13183
In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...
CVE-2017-13184
In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...
CVE-2017-13177: Improper Restriction of Operations within the Bounds of a Memory Buffer
In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....
The vulnerability in the kgsl_ioctl_gpu_command function of the KGSL kernel driver for the Android operating system, found in the CAF repository, allows a malicious actor to execute arbitrary code within the context of a privileged process.
The vulnerability of the kgslioctlgpucommand function in the Kernel Graphics Support Layer of the Android operating system’s kernel, from the CAF repository, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the...
The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...
The vulnerability of the WLAN kernel component of the Android operating system from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the WLAN kernel component of the Android operating system, found in the CAF repository, is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process, using a specially crafted file...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
The vulnerability of the WLAN kernel component of the Android operating system from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the WLAN kernel component of the Android operating system arises from buffer overflows during the processing of Measurement Request IE requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the context of a privileged process using a...
The vulnerability of the libavc library of the Media Framework operating system Android allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
CVE-2017-14330
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...
Design/Logic Flaw
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...