2252 matches found
Security Advisory - Use After Free Vulnerability on Several Smartphones
There is a use after free vulnerability on certain driver component in smartphone. An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause a denial of service condition. Vulnerability...
ASUS ZenFone 3 Max has an unspecified vulnerability
ASUS ZenFone 3 Max is an Android-based smartphone from ASUS. Pre-installation in ASUS ZenFone 3 Max Build fingerprint used is asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys A security vulnerability exists in the com.asus.dm.installer.DMInstallerService service ...
All the reasons why cybercriminals want to hack your phone
When people think of hacking, most imagine desktop computers, laptops, or perhaps even security cameras. However, in recent years, cybercriminals have expanded their repertoire to include smartphones, too. Here are 10 reasons why they may be looking to hack your phone. 1. To infect it with malwar...
Worried about Spouseware?
We recently participated in a BBC Radio 4 interview for You and Yours about ‘Spouseware’. This covers smartphone apps which are used by a domestic abuser to track and monitor their victim. The tracking ‘spouseware’ can tell the abuser where their victim is, when they use the phone, what speed...
CVE-2018-7987
Affected product: Huawei P20 smartphones. Vulnerability: memory write out-of-bounds when handling a response message during certain inquiry operations, allowing a crafted message to cause a denial of service. Root cause: improper handling of the response message leading to out-of-bounds write (pr...
Design/Logic Flaw
There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...
User Confidence in Smartphone Security Abysmal
Smartphone owners are growing worried about data privacy, and will delete apps they don’t trust. And only a quarter feel they are in control of their personal data. Research carried out by the Mobile Ecosystem Forum MEF, a trade body, found that Europeans are among the most wary cellphone users,...
[SECURITY] Fedora 27 Update: kde-connect-1.3.3-1.fc27
KDE Connect adds communication between KDE and your smartphone. Currently, you can pair with your Android devices over Wifi using the KDE Connect 1.0 app from Albert Vaka which you can obtain via Google Play, F-Droid or the project website...
CVE-2018-7925
The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171C00 have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability...
The Titan M Chip Powers Up Pixel 3 Security
Google's latest flagship smartphone includes the Titan M, a security-focused chip that keeps users safe against sophisticated attacks...
West Virginia Using Internet Voting
This is crazy and dangerous. West Virginia is allowing people to vote via a smart-phone app. Even crazier, the app uses blockchain -- presumably because they have no idea what the security issues with voting actually are...
Google Will Charge Android Phone Makers to Use Its Apps In Europe
Would you prefer purchasing an Android device that doesn't have any apps or services from Google? No Google Maps, No Gmail, No YouTube! And NOT even the Google Play Store—from where you could have installed any Android apps you want Because if you live in Europe, from now on, you have to spend so...
Intra Gives Older Versions of Android Important DNS Protections
Alphabet subsidiary Jigsaw is using a new app to give DNS encryption protections to any Android smartphone from the last seven years...
Mobile Websites Can Tap Into Your Phone's Sensors Without Asking
Apps need your explicit permission to access your smartphone's motion and light sensors. Mobile websites? Not so much...
How the HTC Exodus Blockchain Phone Plans to Secure Your Cryptocurrency
HTC starts filling in the details of its so-called blockchain smartphone, expected to launch later this year...
Security feature bypass
Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167C786 have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations...
CVE-2018-7991
CVE-2018-7991 concerns Huawei Mate10 smartphones (versions earlier than ALP-AL00B 8.0.0.110(C00)) with a Factory Reset Protection (FRP) bypass vulnerability. The issue arises because the system does not sufficiently verify permissions when a device is connected via a data cable to a computer and ...
CVE-2018-7906
Some Huawei smart phones with software of Leland-AL00 8.0.0.114C636, Leland-AL00A 8.0.0.171C00 have a denial of service DoS vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful...
CVE-2018-7906
CVE-2018-7906 affects Huawei smartphones (Leland-AL00 with 8.0.0.114(C636) and Leland-AL00A with 8.0.0.171(C00)). The root cause is insufficient verification of a parameter in a process that can be triggered by a malicious app, leading to a denial of service and a black screen requiring reboot. C...