26 matches found
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
CVE-2026-107058: n/a: An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another…
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
CVE-2026-107058
An issue in Shelter (versionCode 445 ) allows attackers to register their own auth_key , leading to the takeover of another user's binder service API and preference state . The root cause is categorized as Improper Authentication (CWE-287). No specific remediation or exploit details are provided ...
PT-2026-132389
Name of the Vulnerable Software and Affected Versions Shelter version 445 Description An issue allows attackers to register their own auth key, enabling the takeover of another user's binder service API and preference state. This allows an attacker to gain control over the API access and preferen...
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
Peter Cai Shelter security vulnerability
Peter Cai Shelter has a security vulnerability whereby attackers can register their own authkey and take control of other users’ binder service APIs and preference states...
EUVD-2026-113256
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own authkey and execute a takeover of another user's binder service API and preference state...
DJI CrystalSky ZS600C command injection vulnerability
Versions DJI CrystalSky ZS600C from 0.3.9.7 through 0.6.6.9 contain a security vulnerability. This vulnerability stems from the absence of authorization checks in the native Binder service android.dji.server. Processing routines fail to verify the caller’s identity or permissions; instead, they...
Samsung InputManagerService Unauthorized Access Vulnerability
Samsung InputManagerService is a service for Samsung SAMSUNG mobile devices, a service that Android abstracts in order to handle various user operations, itself can be seen as a Binder service entity, instantiated when the SystemServer process is started and registered to the An unauthorized acce...
Samsung Mobile Devices InputManagerService security vulnerability
Samsung InputManagerService is a service for Samsung SAMSUNG mobile devices, a service that Android abstracts in order to handle various user operations, itself can be seen as a Binder service entity, instantiated when the SystemServer process is started and registered to the An unauthorized acce...
Heap overflow
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9143
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9143
CVE-2018-9143 affects Samsung mobile devices running Android M (6.0) and N (7.x). The vulnerability is a heap overflow in the sensorhub binder service, allowing code execution in a privileged process (SVE-2017-10991). Impact is rated high/critical (C/H/I/A) per NVD metrics. No exploitation detail...
CVE-2018-9143: Out-of-bounds Write
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
Android - 'getpidcon' Permission Bypass in KeyStore Service
The keystore binder service "android.security.IKeystoreService" allows users to issue several commands related to key management, including adding, removing, exporting and generating cryptographic keys. The service is accessible to many SELinux contexts, including application contexts, but also...
PT-2017-3627
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 and N7.x software Description: A heap overflow in the sensorhub binder service can lead to code execution in a privileged process. This issue is caused by a buffer overflow in memory, which can be exploited by...
Android HDCP Denial of Service Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android HDCP denial-of-service vulnerability exists because the encrypt interface provided by the HDCP service High-bandwidth Digital Content Protection does not perform strict paramet...
LG G4 - lgdrmserver Binder Service Multiple Race Conditions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In several places, these handles are retrieved from a...