Linux kernel DCCP double-free vulnerability（CVE-2017-6074）

This is an announcement about CVE-2017-6074 1 which is a double-free vulnerability I found in the Linux kernel. It can be exploited to gain kernel code execution from an unprivileged processes. Fixed on Feb 17, 2017:...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Secure Execution Environment Communicator driver for the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context,...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s sound driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Qualcomm’s Android operating system’s crypto driver is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the kernel context...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “critical” due to th...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “highly critical” because it...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the audio driver of the Qualcomm Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “high”...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MediaTek driver for the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is considered “high” because i...

LG G4 - Touchscreen Driver write_log Kernel Read/Write Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990 The following function and variations on the same code is used to write to files from kernel code in various touchscreen drivers. This copy is from...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01584)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus Broadcom Wi-Fi Driver elevation of privilege vulnerability (CNVD-2017-01497)

Android on Nexus 6P, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Nexus 6P smart device, etc. The Broadcom Wi-Fi Driver is a Wi-Fi driver module developed by Broadcom that is used in the Nexus 6P. Broadcom Wi-Fi Driver is a Wi-Fi...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01582)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01580)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01581)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...