Android WLAN Kernel Component Code Execution

The vulnerability of the WLAN kernel component of the Android operating system arises from buffer overflows during the processing of Measurement Request IE requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the context of a privileged process using a...

libavc Privilege Escalation

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted...

KGSL Kernel Driver Code Execution

The vulnerability of the kgslioctlgpucommand function in the Kernel Graphics Support Layer of the Android operating system’s kernel, from the CAF repository, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the...

UnpackCore Kernel Code Execution

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...

libmpeg2 Media Framework Code Execution

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

libmpeg2 Media Framework Code Execution

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

PT-2017-3627

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 and N7.x software Description: A heap overflow in the sensorhub binder service can lead to code execution in a privileged process. This issue is caused by a buffer overflow in memory, which can be exploited by...

PT-2017-3208

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a Use After Free condition in the KGSL driver function kgsl ioctl gpu command. This condition can potentially occur in the KGSL driver, which is part of the Android...

PT-2017-3214

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libmpeg2 library. This vulnerability is associated with inadequate access control. A...

PT-2017-3215

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description A remote code execution issue in the Android media framework libavc is related to inadequate access control. This allows a remote attacker to execute arbitrary code in the context of a privileged...

PT-2017-3213

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the libmpeg2 component of the Android Media Framework, allowing a remote attacker to execute arbitrary code in the context of a privileged...

PT-2017-3216

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the libmpeg2 component of the Android Media Framework, allowing a remote attacker to execute arbitrary code in the context of a privileged...

CVE-2017-14330

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

Design/Logic Flaw

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

CVE-2017-14330

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

CVE-2017-14330: Improper Privilege Management

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

PT-2017-13395

Name of the Vulnerable Software and Affected Versions Extreme EXOS versions 16.x through 22.x Description The issue allows administrators to obtain a root shell via certain vectors involving a privileged process. Recommendations For versions 16.x through 22.x, update to a version that contains a...

NetBackup Access Control File Writing

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...

libstagefright Code Execution

The vulnerability of the libstagefright library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process remotely...

Android multimedia framework Code Execution

The vulnerability of the multimedia framework of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected data or execute arbitrary code within a privileged process...