CVE-2017-18072

CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...

CVE-2017-18145

CVE-2017-18145 describes a Use-After-Free condition in the DPM native process while handling Android framework events on Qualcomm Snapdragon platforms. The underlying issue is that an iterator pointer is deleted after an event is processed, which can cause a Use After Condition during processing ...

CVE-2017-18127: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...

CVE-2017-18133: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur...

PT-2018-1238

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by a buffer overflow vulnerability in RTP during a VoLTE call, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of protected...

CVE-2017-13218

The CVE-2017-13218 entry documents a side-channel information-disclosure vulnerability caused by access to CNTVCT_EL0 in various ARM-based devices (e.g., Small Cell SoC, Snapdragon lines). Affected components include listed CPUs/SoCs (FSM9055, IPQ4019, IPQ8064, MDM9xxx, SD series, etc.) and relat...

CVE-2017-13218: Exposure of Sensitive Information to an Unauthorized Actor

Access to CNTVCTEL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M,...

Wear Root Check - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wear Root Check published at the 'play' market has multiple vulnerabilities...

WEAR - Fashion Lookbook - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application WEAR - Fashion Lookbook published at the 'play' market has multiple vulnerabilities...

CVE-2016-3677

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

Code injection

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-3677

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-3677

Huawei Wear App for Android is affected (versions before 15.0.0.307) by CVE-2016-3677 due to lack of SSL certificate validation. This allows local users to cause unspecified impact via unknown vectors. Remediation per Huawei advisory is to update to a fixed version (15.0.0.307 or later); exploita...

PT-2016-5652

Name of the Vulnerable Software and Affected Versions Huawei Wear App version prior to 15.0.0.307 Description The issue concerns the Huawei Wear App's failure to validate SSL certificates, allowing local users to have an unspecified impact. Recommendations For versions prior to 15.0.0.307, update...

CVE-2016-3677: Insufficient Verification of Data Authenticity

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

Blackjack Wear - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Blackjack Wear published at the 'play' market has multiple vulnerabilities...

Huawei Wear - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Huawei Wear published at the 'play' market has multiple vulnerabilities...

Aeris Wear Weather - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Aeris Wear Weather published at the 'play' market has multiple vulnerabilities...

InstaWeather for Android Wear - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application InstaWeather for Android Wear published at the 'play' market has multiple vulnerabilities...

Store For Android Wear - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Store For Android Wear published at the 'play' market has multiple vulnerabilities...