CVE-2017-13238: Exposure of Sensitive Information to an Unauthorized Actor

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Androi...

Google Android HTC Component Information Disclosure Vulnerability (CNVD-2018-03847)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which HTC bootloader is a bootloader. An information disclosure vulnerability exists in the HTC bootloader in Android, which stems from the fact that the debugging function can ...