CVE-2022-28878 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine...

CVE-2022-28878

CVE-2022-28878 describes a Denial-of-Service in F-Secure Atlant and some WithSecure products where scanning fuzzed APK files can crash the scanning engine. Public details in the initial document indicate impact to availability but do not specify affected versions, exact vulnerable components, roo...

GlassWire: Facebook App API credentials leaked in the APK

Facebook App API credentials were leaked in the GlassWire version 1,1,26,0b F1827380 APK file, including the App ID and App Secret. This could allow an attacker to modify Facebook App settings using the leaked token...

MAL-2022-3158 Malicious code in free-fortnite-skins-genrator-apk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45a71445ed3a1bf59289d5d880a88cc8110ef86e663311b6a6c945648ef8bb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cashapp-hakc-apk-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04eadcab52b9bac905ca7c27c7cd573703c8ca31b52ed9001fb658461021ad7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1840 Malicious code in cashapp-hakc-apk-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04eadcab52b9bac905ca7c27c7cd573703c8ca31b52ed9001fb658461021ad7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3129 Malicious code in free-cashapp-money-hakc-apk-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e882b594c41385c88a7c2afbfba23801a539bd8123c9123f0e3ed68681c53b87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Code injection

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APKs data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35116

The CVE-2021-35116 issue affects Qualcomm Snapdragon devices (Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Wearables) and is triggered when an APK loads a crafted model into the CDSP, potentially compromising the CDSP and other APKs’ data executing there. This is the stated impact...

DroidDetective - A Machine Learning Malware Analysis Framework For Android Apps

A machine learning malware analysis framework for Android apps. DroidDetective is a Python tool for analysing Android applications APKs for potential malware related behaviour and configurations. When provided with a path to an application APK file Droid Detective will make a prediction using it'...

CVE-2022-20005

In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20005

In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20005

CVE-2022-20005 is an Android elevation-of-privilege issue in PackageInstallerSession.java (validateApkInstallLocked). The vulnerability allows a mismatch between running code and a parsed APK, enabling local privilege escalation with no user interaction required, on Android 10, 11, 12 and 12L. Th...

Google Android Information Disclosure Vulnerability (CNVD-2022-44585)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which originates in LoadedPackage::Load in LoadedArsc.cpp, and due to a lack of boundary checking, an out-of-bounds read may occur. read. An attacker...

CVE-2022-24931

Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission...

CVE-2021-39664

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Out-of-bounds

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-39664

CVE-2021-39664 concerns Android 12, rooted in the loader for APK resources: In LoadedPackage::Load of LoadedArsc.cpp, a missing bounds check can cause an out-of-bounds read. The documented impact is local information disclosure when parsing APK files, with no additional execution privileges requi...