CVE-2019-9386

In NFC server, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID:...

CVE-2019-1988

In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0...

PT-2019-15985

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description The issue is related to a possible out of bounds write due to improper input validation in the system server, which could lead to remote code execution. User interaction is required for exploitation...

PT-2019-15983

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-9 Description The issue is related to a missing bounds check in the SkSwizzler::onSetSampleX function of SkSwizzler.cpp, which could lead to a possible out of bounds write. This might result in remote escalati...

Google Android Framework Component Remote Code Execution Vulnerability (CNVD-2019-23561)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A remote code execution vulnerability exists in the Framework component of Google Android 8.0, 8.1, and 9. An attacker can exploit this vulnerability to potentially cause...

Google Android Framework Component Remote Code Execution Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A remote code execution vulnerability exists in the Framework component of Google Android 9. An attacker can exploit this vulnerability to potentially cause a remote...

CVE-2018-19505

Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a...

CVE-2018-19505

Remedy AR System Server in BMC Remedy 7.1 is affected by an impersonation flaw in WOI:WorkOrderConsole’s userdata.js. The root cause is a username substitution via UserData_Init, allowing a user to assume another user’s identity in certain scenarios. Impact is user impersonation with elevated ris...

PT-2019-9839

Name of the Vulnerable Software and Affected Versions BMC Remedy versions 7.1 Description The issue arises from the Remedy AR System Server in BMC Remedy, where it may fail to set the correct user context in certain impersonation scenarios. This can allow a user to act with the identity of a...

Android Permission License and Access Control Vulnerability (CNVD-2019-09146)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the GraphicBuffer.cpp file's unflatten in Android versions 8.1 and 9, which stems from the program not properly validating input. An attacker...

CVE-2018-9547

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2018-9547: Improper Input Validation

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

BMC Remedy 7.1 User Impersonation

...

Android (zygote->init;) Chain from USB Privilege Escalation Exploit

Exploit for Android platform in category local exploits After reporting https://bugs.chromium.org/p/project-zero/issues/detail?id=1583 Android ID 80436257, CVE-2018-9445, I discovered that this issue could also be used to inject code into the context of the zygote. Additionally, I discovered a...

PT-2018-17588 · Unknown · Cms Server +1

Name of the Vulnerable Software and Affected Versions: UCMBD Server versions 10.20 through 11.0 CMS Server version 2018.05 BACKGROUND Description: A remote Cross-site Request forgery CSRF potential has been identified, which could allow for remote unsafe deserialization and cross-site request...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361...

CVE-2017-13173

CVE-2017-13173 is an elevation of privilege vulnerability affecting the MediaTek system server on Android. The issue targets the system server component (within MediaTek integration) and is described as an Android kernel topic, with local access requirements and high impact on confidentiality, in...

CVE-2017-13173

An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361...

CVE-2017-13173: Undefined Security Weakness

An elevation of privilege vulnerability in the MediaTek system server. Product: Android. Versions: Android kernel. Android ID A-28067350. References: M-ALPS02672361...

PT-2017-12956

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the MediaTek system server. It affects Android products. Recommendations At the moment, there is no information about a newer version that contains a...