Social media: A treasure trove of spam and scams

There are two kinds of spam associated with social media. There are spam ads that actually live on social media, and there is spam that comes in your inbox, courtesy of social media. Both thrive by using data from your social media accounts. But how do spammers know how to target you and send you...

Pixel / Nexus Security Bulletin—June 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-06-05 or later address all issues in this bulletin and all issues in the...

Android OS FLAG_SECURE Information Disclosure

Blog post here: https://wwws.nightwatchcybersecurity.com/2018/05/24/android-os-didnt-use-flagsecure-for-sensitive-settings-cve-2017-13243/ SUMMARY Android OS did not use the FLAGSECURE flag for sensitive settings, potentially exposing sensitive data to other applications on the same device with t...

[SECURITY] Fedora 28 Update: leptonica-1.76.0-1.fc28

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

Samsung Patches Six Critical Bugs in Flagship Handsets

Samsung began rolling out patches over the weekend to fix six critical bugs found in its flagship Android handsets as part of its May patch bulletin. Flaws range from a remote code execution bug to a buffer overflow vulnerability, plus a peek-and-poke command bug that leaves memory locations open...

CVE-2018-5160

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

Android Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Pixel / Nexus Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-05-05 or later address all issues in this bulletin and all issues in the...

Google Android Media framework (libhevc) information disclosure vulnerability (CNVD-2018-08603)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android Media framework (libhevc) Denial of Service Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android Framework (package installer) Denial of Service Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework is a package installer framework. Framework package installer is one of the package installer framework. A denial ...

Google Android Framework (aosp email application) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework aosp email application is a framework for email applications. Framework aosp email application is one of the...

Google Android Media framework information disclosure vulnerability (CNVD-2018-08605)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Media framework is a part. Media framework is one of the multimedia development framework. An information...

Google Android Broadcom bcmdhd Driver Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Broadcom Bcmdhd driver is a Broadcom WiFi driver used in the... Broadcom Bcmdhd driver is an American Broadcom Broadcom...

Android Media framework (libavc) information disclosure vulnerability (CNVD-2018-08704)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Media Framework libavc is a framework used for multimedia development. is a framework used for multimedia development. ...

Google kernel mnh_sm driver information disclosure vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. kernel mnhsm driver is one of the kernel drivers. An information disclosure vulnerability exists in the kernel mnhsm driver in Android on Google Pixel and Nexus devices. An attacke...

Google Android Media framework(libavc) security vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

Google Android pci sysfs elevation of privilege vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. An elevation of privilege...

Google Android System (system ui) Denial of Service Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. A denial of service vulnerability...

Google Android System (system ui) Denial of Service Vulnerability (CNVD-2018-09466)

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. A denial of service vulnerability...