CVE-2016-10276

CVE-2016-10276 (Qualcomm bootloader) targets the Qualcomm bootloader on Android devices, enabling a local malicious app to execute arbitrary code within the kernel context (elevation of privilege). The issue is described as critical due to potential local, permanent device compromise that may req...

CVE-2017-0627

An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

Google Android Synaptics touchscreen driver information disclosure vulnerability

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA, of which Synaptics touchscreen Driver is one. Synaptics touchscreen Driver is one of the touchscreen drivers. An information...

Google Android Qualcomm pin controller driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android Qualcomm pin controller driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privilege by inducing ...

Google Android Qualcomm camera driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android Qualcomm camera driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privilege by inducing a user t...

Google Android kernel trace subsystem elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android kernel trace subsystem, which can be exploited by a remote attacker to build a malicious application that can be elevated in privilege by inducing a user t...

Google Android File Encryption Information Disclosure Vulnerability

Google Android is a Linux-based operating system for smartphone devices. An information disclosure vulnerability exists in Google Android file encryption, which can be exploited by remote attackers to build malicious applications that can be parsed by users and can access sensitive information...

Google Android MediaTek system management interrupt driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android MMediaTek system management interrupt driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privileg...

Android Qualcomm bootloader privilege escalation vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Wi-Fi driver for Qualcomm’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system kernel using a special application...

Android NVIDIA Graphics Driver Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.NVIDIA Video Driver is one of the NVIDIA video card drivers. A privilege exploit exists in the Android NVIDIA Video Driver. The vulnerability can be exploited by an attacker to...

Google Shuts Down Docs Phishing Spree

Google said it has disabled offending accounts involved in a widespread spree of phishing emails today impersonating Google Docs. The emails, at the outset, targeted journalists primarily and attempted to trick victims into granting the malicious application permission to access the user’s Google...

CVE-2016-10275

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Code injection

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local...

Information Disclosure

BouncyCastle is vulnerable to information disclosure attacks. Attackers can use a malicious application to obtain sensitive user information...

CVE-2017-0576

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0564

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

CVE-2017-0577

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0583

An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...