Google Android Framework elevation of privilege vulnerability (CNVD-2019-23119)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit the vulnerability to...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-23121)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit the vulnerability to...

Google Android Framework SmsDefaultDialog.java file elevation of privilege vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the SmsDefaultDialog.onStart file in Android. An attacker can exploit this vulnerability to bypass user interaction requests and gain additional...

CVE-2018-14980: Incorrect Permission Assignment for Critical Resource

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys contains the android framework i.e., systemserver with a package name of android versionCode=24, versionName=7.0 that has been modified by ASUS or...

PT-2019-9078

Name of the Vulnerable Software and Affected Versions ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US Phone/ASUS X008 1:7.0/NRD90M/US Phone-14.14.1711.92-20171208:user/release-keys Description The android framework in the ASUS ZenFone 3 Max Android device has been modified,...

CVE-2018-14983: Improper Input Validation

The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android framework i.e., systemserver with a package name of android versionCode=24, versionName=7.0 that has been modified by Sony or another entity in the supp...

PT-2019-9079

Name of the Vulnerable Software and Affected Versions Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys android framework versionCode=24, versionName=7.0 Description The android framework in the Sony Xperia L1 Android device...

Google Android Framework Information Disclosure Vulnerability (CNVD-2019-10472)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Framework in Google Android, which can be exploited by attackers to disclose information...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-23558)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. This could lead to remote code execution or click...

Google Android Framework Component Remote Code Execution Vulnerability (CNVD-2019-23563)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A remote code execution vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit the vulnerability to...

Google Android Framework Component Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 8.0, 8.1, and 9. An attacker can exploit this vulnerability to achieve elevati...

CVE-2018-14988

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that contains an exported broadcast receiver application component that, wh...

Command injection

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that contains an exported broadcast receiver application component that, wh...

CVE-2018-14987

The CVE-2018-14987 entry concerns the MXQ TV Box (Android 4.4.2) where the Android framework dynamically registers a broadcast receiver component, com.android.server.MasterClearReceiver, instead of static registration in the core Android manifest. This dynamic registration is not protected by the...

CVE-2018-14988

The CVE-2018-14988 entry describes an issue in MXQ TV Box 4.4.2 where an exported Android framework broadcast receiver component (com.android.server.SystemRestoreReceiver) is accessible without permissions and can write to /cache/recovery/command to trigger boot into recovery mode. This can forma...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22762)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, which can be exploited by an attacker to elevate...

Google Android Framework elevation of privilege vulnerability (CNVD-2018-22760)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by an attacker to...

Android AMediaCodecCryptoInfo_new Code Execution

The vulnerability of the AMediaCodecCryptoInfonew function in NdkMediaCodec.cpp of the Android operating system’s framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a...

Android Framework checkGrantUriPermissionLocked Privilege Escalation

The vulnerability of the checkGrantUriPermissionLocked function in the ActivityManagerService.java file of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a...

Android Framework getOffsetForHorizontal DoS

The vulnerability of the getOffsetForHorizontal function in the Layout.java component of the Android operating system’s framework is related to improper cleaning or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...