Joyent SmartOS Hyprlofs FS IOCTL 32-bit File System path Buffer Overflow Privilege Escalation Vulnerability

Summary An exploitable buffer overflow exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer...

Geoedge Global Proxy App - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Geoedge Global Proxy App published at the 'play' market has multiple vulnerabilities...

Google Pixel C NVIDIA libomx Library local elevation of privilege vulnerability

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Google Pixel XL smart device, etc. The NVIDIA libomx library is one of the NVIDIA libomx library is one of the standard library components for multimedia...

Google Pixel C NVIDIA libomx Library local elevation of privilege vulnerability (CNVD-2016-12176)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Google Pixel XL smart device, etc. The NVIDIA libomx library is one of the NVIDIA libomx library is one of the standard library components for multimedia...

Google Android Kernel Component Information Disclosure Vulnerability (CNVD-2016-12193)

Android on Nexus 5X is an open source operating system based on Linux developed by Google and the Open Handset Alliance OHA for the Nexus 5X and other smart devices. kernel is one of the kernels used in it. An information disclosure vulnerability exists in the kernel component of Android on sever...

Google Nexus Qualcomm Sound driver elevation of privilege vulnerability (CNVD-2016-12201)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. A power lifting vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google devices. The...

Google Android kernel performance subsystem elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel Performance Subsystem is a kernel performance component. An elevation of privilege vulnerability exists in the kernel performance subsystem in Android. The...

Google Android MediaTek Driver Elevation of Privilege Vulnerability (CNVD-2016-12188)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An elevation of privilege vulnerability exists in the MediaTek Driver in versions of Android...

Google Android Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2016-12216)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi Driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi Driver in versions of Androi...

Google Android Kernel Component Information Disclosure Vulnerability (CNVD-2016-12194)

Android on Nexus 5X is an open source operating system based on Linux developed by Google and the Open Handset Alliance OHA for the Nexus 5X and other smart devices. kernel is one of the kernels used in it. An information disclosure vulnerability exists in the kernel component of Android on sever...

Google Nexus Qualcomm Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google...

Google Android kernel performance subsystem elevation of privilege vulnerability (CNVD-2016-12173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel Performance Subsystem is a kernel performance component. The kernel performance subsystem in Android is vulnerable to a power lifting vulnerability. The...

Google Nexus Qualcomm Sound driver elevation of privilege vulnerability (CNVD-2016-12200)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google...

Google Android MediaTek Driver Elevation of Privilege Vulnerability (CNVD-2016-12187)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An elevation of privilege vulnerability exists in the MediaTek Driver in versions of Android...

Vynme - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Vynme published at the 'play' market has multiple vulnerabilities...

Vinme.Ge - Corrupted files, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Vinme.Ge published at the 'play' market has multiple vulnerabilities...

Fedora Update for chromium-native_client FEDORA-2016-c671aae490

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Downloads Resources over HTTP

Overview Affected versions of webrtc-native insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

Google Santa Tracker - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Google Santa Tracker published at the 'play' market has multiple vulnerabilities...

AndroidNative layer file parsing vulnerability mining guide-vulnerability warning-the black bar safety net

This article to hand Q A file parsing class vulnerability discovery, for example, describes the Android Native layer file parsing type of the vulnerability discovery process Hand Q this application from the function is very large, if the use similar to the MFFA framework to dig the file parsing...