Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Split function. An attacker can cause excessive CPU consumption and resource exhaustion by supplying a malicious APK stream that triggers unbounded gzip inflation. Remediation...

apko has a path traversal in apko dirFS which allows filesystem writes outside base

A Path Traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious APK package e.g., via a compromised or typosquatted repository could create directories or symlinks outside the intended installation root. The MkdirAll, Mkdir, and Symlink...

Denial of Service Vulnerability in Multiple Huawei Phones

Huawei Mate 8 and others are smartphone products of the Chinese company Huawei Huawei. A denial of service vulnerability exists in several Huawei phones due to mishandling of malicious parameters. An attacker launches an attack by inducing a user to install a malicious APK and pre-install an...