TrustZone Android

The vulnerability of the TrustZone component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to perform actions that were not intended by the browser interface...

CAF repository Android Freeze

The vulnerability of the CAF repository in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to become unresponsive in a “hang” state by utilizing the...

Qualcomm LED Android Driver Code Execution

The vulnerability of the Qualcomm LED Android operating system driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MediaTek driver Code Execution

The vulnerability of the MediaTek driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Qualcomm Wi-Fi Driver Code Execution

The vulnerability of Qualcomm Wi-Fi driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

Qualcomm Android Video Driver Code Execution

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm Android Video Driver Code Execution

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Android Qualcomm Wi-Fi Driver Denial of Service Vulnerability (CNVD-2017-10594)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is a wifi driver. A denial of service vulnerability exists in the Qualcomm Wi-Fi Driver in Android on Nexus 5X, Pixel and Pixel XL devices. An attacker...

CVE-2017-0591

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

Android Memory Corruption RCE

The vulnerability of the libhevc component in the Android operating system’s Mediaserver is caused by an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...

Android Data Compromise

The vulnerability of the Mediaserver application for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

Android Code Execution

The vulnerability of the Android operating system’s libnl service is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the Wi-Fi service context, using a local malware application...

Android Memory Corruption RCE

The vulnerability of the libhevc component in the Android operating system’s Mediaserver is caused by an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...

Android Code Execution

The vulnerability of the SurfaceFlinger component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Android Code Execution

The vulnerability of the CameraBase component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Android Memory Corruption RCE

The vulnerability of the libavc component in the Android MediaServer operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely, using a specially crafted media fil...

Android Data Compromise

The vulnerability of the Android operating system’s sound driver is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

Multiple Samsung Galaxy product security bypass vulnerabilities

Android for Samsung Galaxy S6 Edge is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use in smartphones released by Samsung in South Korea. A security bypass vulnerability exists in multiple Samsung Galaxy products. An attacker could use this...

Android Code Execution

The vulnerability of the NFC application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process. This issue is considered “high” because it can be...

Android Code Execution

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...