How Bugs Lead to a Better Android

Google is used to taking a beating over Android vulnerabilities, but it says too often its hard work fixing vulnerabilities and keeping the platform safe goes unnoticed. “Over the seven years working on Android security vulnerabilities I’ve seen a lot of bugs and a lot of fear uncertainty and...

CVE-2016-3758

Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides a long filename, aka internal bug 27840771...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm Android operating system’s video driver is related to code errors. Exploiting this vulnerability can allow a remote attacker to gain increased privileges through a specially created application...

Vulnerabilities in the Android operating system that allow a hacker to trigger a service failure or execute arbitrary code

Multiple vulnerabilities in the h264dec library of the libstagefright component in the mediaserver component of the Android operating system are caused by a numerical overflow. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code or cause a service failure...

CVE-2016-0849

Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...

CVE-2016-0840

CVE-2016-0840 refers to multiple stack-based buffer underflows in mediaserver’s decoder/ih264d_parse_cavlc.c on Android 6.x prior to 2016-04-01. The flaw allows memory corruption that could enable remote code execution or a denial of service when processing crafted media files. The entry is suppo...

Vulnerabilities in the Android operating system that allow a hacker to increase their privileges

The multiple vulnerabilities in the libeffects library of the Android operating system’s mediaserver are caused by a numerical overflow. Exploiting these vulnerabilities could allow an attacker, operating remotely, to enhance their privileges through a specially created application...

Adblock Browser for Android - ContentProvider mode not defined, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Adblock Browser for Android published at the 'play' market has multiple vulnerabilities...

USB Drivers for Android - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application USB Drivers for Android published at the 'play' market has multiple vulnerabilities...

More than a Billion Snapdragon-based Android Phones Vulnerable to Hacking

More than a Billion of Android devices are at risk of a severe vulnerability in Qualcomm Snapdragon chip that could be exploited by any malicious application to gain root access on the device. Security experts at Trend Micro are warning Android users of some severe programming blunders in...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Skia component in the Android operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted media file...

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey (important)

Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. Seamonkey was updated to 2.39. New features in Mozilla Firefox: Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your...

Researchers Find 85 Percent of Android Devices Insecure

Roughly 85 percent of Android devices have been exposed to one of 13 critical vulnerabilities that plague the operating system – and because of a chronic failure by carriers to issue patches, many linger without getting fixed for far too long, researchers said. Especially in the wake of...

Vulnerabilities of the Android operating system that allow a hacker to execute arbitrary code

The multiple vulnerabilities in the libstagefright library of the Android operating system are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using specially crafted MP4 data...

Vulnerabilities in the Android operating system that allow a hacker to trigger a service failure

Multiple vulnerabilities in the addVorbisCodecInfo function of the libstagefright library in the Android operating system are related to integer overflow. Exploiting these vulnerabilities could allow a malicious actor to cause service failures by using specially crafted Matroska-formatted data...

Vulnerabilities of the Android operating system that allow a hacker to escalate their privileges or cause service failures

The numerous vulnerabilities of the Android operating system are related to integer overflows. Exploiting these vulnerabilities can allow attackers to enhance their privileges or cause service failures by sending large amounts of file descriptors or integer values...

Google Won't Patch WebView Prior to Android Jelly Bean

Hackers may have a perpetual shooting gallery of unpatched Android vulnerabilities at their disposal after it was disclosed today that Google no longer will provide WebView patches for older versions of its operating system. Researchers at Rapid7 have made mincemeat of WebView in Android Jelly...

Google Chrome for Android < 36.0.1985.122 Multiple Vulnerabilities

Binary data 8341.prm...

GoToMeeting for Android多个本地信息泄露漏洞

BUGTRAQ ID: 65123 CVECAN ID: CVE-2014-1664 GoToMeeting是在线会议解决方案。 Citrix GoToMeeting for Android（版本5.0.799.1238）记录HTTP请求中包含了敏感信息，这可使远程攻击者通过可以读取系统日志文件的应用，利用此漏洞获取用户ID、会议细节、身份验证令牌等。 0 Citrix Online GoToMeeting for Android 5.0.799.1238 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities A free framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. Use dynamic analysis on Android applications and devices for quicker security assessments. Share publicly known...