EUVD-2017-9402

Malware in sbrugna...

CVE-2017-18275

CVE-2017-18275 is a local, command-injection style vulnerability affecting the simContacts service on Snapdragon-based devices (Automobile, Mobile, Wear) across numerous SD/SoC revisions. Exploitation would enable a new account insertion via the Android command line, with attack vector LOCAL, low...

CVE-2017-18275: Undefined Security Weakness

A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, S...