Android Permission License and Access Control Vulnerability (CNVD-2019-09151)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android, which stems from the program's failure to perform proper access control. A detailed vulnerabili...

Google Android Privilege Access Control Vulnerability (CNVD-2018-25313)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A limited access control vulnerability exists in Yocto in Android, which stems from a failure to properly configure a script. An attacker could exploit this vulnerability to gain...

Google Android Privilege Access Control Vulnerability (CNVD-2018-25314)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege access control vulnerability exists in Yocto in Android, which stems from the program failing to properly configure the daemon. An attacker could exploit the...

Yocto Project Information Disclosure Vulnerability

Yocto project is an open source collaboration project . An information disclosure vulnerability exists in Yocto Project. An attacker can obtain sensitive information by reading the URL in the Source entry in an ipk package...

CVE-2017-9731

In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...

CVE-2017-9731

In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...

Code injection

In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...

CVE-2017-9731

The CVE-2017-9731 entry concerns the Yocto Project/Poky component: meta/classes/package_ipk.bbclass (Poky-Pyro 17.0.0 for Yocto through YP Core - Pyro 2.3). The issue enables information disclosure by allowing attackers to read a URL from a Source entry in an ipk package, exposing sensitive data....