Google Android System suffers from an unspecified vulnerability (CNVD-2019-28633)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

Unspecified Vulnerability in Google Android System

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A remote code execution vulnerability exists in System in Android. An attacker can exploit this vulnerability to execute code...

Android Qualcomm WLAN Information Disclosure Vulnerability (CNVD-2018-13388)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google Android has an unspecified vulnerability (CNVD-2018-10039)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

Google Awards Record $112,500 Bounty for Android Exploit Chain

Prolific bug hunter Guang Gong has earned the highest-ever payout for a vulnerability in the history of Google’s Android Security Rewards program, which began in 2015. He earned a combined $112,500 for the disclosure of an Android exploit chain impacting Google’s Pixel handset that could allow an...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-00628)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media Framework in Android. A remote attacker could exploit th...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-36352)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media Framework in Android. A remote attacker can exploit...

R7-2017-07: Multiple Fuze TPN Handset Portal vulnerabilities (FIXED)

This post describes three security vulnerabilities related to access controls and authentication in the TPN Handset Portal, part of the Fuze platform. Fuze fixed all three issues by May 6, 2017, and user action is not required to remediate. Rapid7 thanks Fuze for their quick and thoughtful respon...

Fuze Patches TPN Handset Vulnerabilties

Fuze, a maker of popular enterprise-grade voice-over-IP handsets, earlier this year patched three vulnerabilities that exposed user account information and enabled unauthorized authentication. The issues were made public today by researchers at Rapid7 who privately disclosed the flaws on April 12...

Google Android Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the TZ API is an interface. A competitive condition vulnerability exists in the TZ API in Android. An attack can exploit this vulnerability to perform unauthorized...

Google Android libxml2 Remote Code Execution Vulnerability

Android is the United States Google Google and the Open Handheld Alliance referred to as OHA co-developed a set of Linux-based open source operating system. libxml2 is one of the C-based language is used to parse XML documents library components. A remote code execution vulnerability exists in...

Android Spyware Still Collects PII Despite Outcry

UPDATE LAS VEGAS—Shanghai Adups Technology Co. was roundly criticized Wednesday during a Black Hat session for continuing to use spyware called Adups on at least two Android handset makers’ phones. Researchers said the company was still collecting personal identifiable information without user...

Google Android HTC Component Information Disclosure Vulnerability (CNVD-2017-22358)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and HTC sound driver is one of the sound codec driver components of HTC. An information disclosure vulnerability exists in the HTC sound driver in Android. An attacker can exploit...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-12948)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component of Android. An attacker could exploit the...

Google Pixel Qualcomm Bootloader Information Disclosure Vulnerability (CNVD-2017-03822)

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handset Alliance OHA in the U.S. The Qualcomm bootloader is a U.S.-developed bootloader used in the Pixel and Pixel XL. Qualcomm bootloader is a...

Zimperium Program Buys Exploits for Patched Mobile Vulnerabilities

Mobile security company Zimperium said Tuesday that it will start buying exploits, but in a departure from most other programs, it will not be buying zero-days. The company’s N-Days Exploit Acquisition Program will pay researchers from a pool of $1.5 million for exploits targeting vulnerabilities...

Google Android Synaptics Touchscreen Driver Elevation of Privilege Vulnerability

Android on Nexus 5X etc. is a set of open source operating system running on Nexus 5X etc. smart devices and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA for short.Synaptics Touchscreen Driver is one of the touchscreen drivers. An elevation of privilege...

3 Mobile UK Hacked – 6 Million Customers' Private Data at risk

Three, one of UK's biggest mobile operators, has become the latest victim of a massive data breach that reportedly left the personal information and contact details of 6 Million of its customers exposed. The company admitted the data breach late Thursday, saying that computer hackers gained acces...

Android Master Key Vulnerability Responsible Disclosure

The researcher behind the now well known Android Master Key vulnerability shared more details about the disclosure process, during which attackers somehow managed to reverse engineer a patch for the bug, and write and distribute malware days before Google released the patch to the public. Jeff...

Android Open Handset Alliance Android >= 1.6 安全模块APK代码泄露漏洞

Android是基于Linux开放性内核的操作系统，是Google公司在2007年11月5日公布的手机操作系统。 Android安全模块存在安全漏洞，可使攻击者修改APK代码，将合法应用转变为恶意木马，而不破坏应用的加密签名。此漏洞影响几乎所有Android手机和设备 0 Android Open Handset Alliance Android = 1.6 厂商补丁： Android ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...