Command injection

An issue was discovered on Samsung mobile devices with Q10.0 Exynos and MediaTek chipsets software. Unauthenticated attackers can execute LTE/5G commands by sending a debugging command over USB. The Samsung ID is SVE-2020-16979 September 2020...

Google Squashes Critical Android Media Framework Bug

Google patched a critical vulnerability in the Media Framework of its Android operating system, which if exploited could lead to remote code execution attacks on vulnerable devices. Overall, Google fixed flaws tied to 53 CVEs as part of its September security updates for the Android operating...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44361)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-44357)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to obta...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44359)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-44358)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to obta...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44360)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

Google Android MediaTek Component Buffer Overflow Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the vcu component of Android. An attacker can exploit the vulnerability to elevate privileges...

CVE-2020-13841

An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...

CVE-2020-13840

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 June 2020...

CVE-2020-13839

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 June 2020...

Security Advisory - Privilege Escalation Vulnerability in Some Huawei Products

There is a privilege escalation vulnerability in the ioctl handlers of the Mediatek CMDQ driver. Local attackers can exploit this vulnerability to read and write to the system memory. Successful exploit may lead to local escalation of privilege. Vulnerability ID: HWPSIRT-2020-03106 This...

Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-27113)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Google Android MediaTek component Email. An attacker can exploit this vulnerability to obtain information...

Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-27115)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Google Android MediaTek component Android Suite Daemon. An attacker can exploit this vulnerability to obtain...

Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-27111)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Google Android MediaTek component mnld. An attacker can exploit this vulnerability to obtain information...

Google Android RCE Bug Allows Attacker Full Device Access

Google has patched a vulnerability in its Android OS that could allow attackers to completely take over someone’s device to install programs, steal or change data, or create new accounts with full privileges. The flaw CVE-2020-0103 was one of 39 vulnerabilities affecting Android OS builds that us...

CVE-2020-12465

A memory overflow and data corruption flaw were found in the Mediatek MT76 driver module for WiFi in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c. An oversized packet with too many rx fragments causes an overflow and corruption in memory of adjacent pages. A local attacker with a...

Linux kernel buffer overflow vulnerability (CNVD-2020-27235)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the mt76addfragment file in drivers/net/wireless/mediatek/mt76/dma.c in versions of Linux kernel prior to 5.5.10. An attacker can...

CVE-2020-12465

CVE-2020-12465: An array overflow in mt76_add_fragment (drivers/net/wireless/mediatek/mt76/dma.c) of the Linux kernel before 5.5.10 can cause memory corruption by an oversized packet with too many RX fragments. The issue is documented in the Uniti/Miracle Linux advisories referencing CVE-2020-124...

CVE-2018-21069

An issue was discovered on Samsung mobile devices with N7.x MediaTek chipsets software. There is information disclosure of kernel stack memory in a MediaTek driver. The Samsung ID is SVE-2018-11852 July 2018...