rtx-cve-2023-45779

This repository is provided AS IS to accompanya Meta Red Team X vulnerability disclosure. It is not an official Meta project and will not be supported like one. A set of scripts and artifacts that demonstrate detection and exploitation of Android devices that ship APEXes signed with test keys fro...

Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot

Overview Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. Use of Weak Credentials CWE-1391 - CVE-2026-107153 Masayoshi Matsubara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

EUVD-2026-100836

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. are vulnerable because they utilize AOSP test keys for their Android Verified Boot (AVB) functionality. If an attacker has physical access to an affected device, they may be able to install a crafted system image . No specific remediation or e...

PT-2026-113642

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-107153: Use of Weak Credentials

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

HP Poly Edge E Series security vulnerabilities

The HP Poly Edge E Series is a series of IP desktop phones produced by the American company HP. The HP Poly Edge E Series contains security vulnerabilities. These vulnerabilities stem from the inclusion of test keys and certificates within the devices, which may allow attackers to extract these...

Malicious code in asap-test-keys (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1775 Malicious code in asap-test-keys (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2023-7530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 2023-12-05 security patch Description: The issue is related to the APEX module framework of AOSP, where improperly used crypto could lead to a malicious update of platform components. This could result in local...