Code injection

drivers/net/ethernet/msm/rndisipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process...

CVE-2016-5868

drivers/net/ethernet/msm/rndisipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process...

CVE-2016-5868: Undefined Security Weakness

drivers/net/ethernet/msm/rndisipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted application compromising a privileged process...

The vulnerability of the Bluetooth Network Encapsulation Protocol (BNEP) in the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the Bluetooth Network Encapsulation Protocol BNEP in the Android operating system is related to buffer overflow vulnerabilities in dynamic memory. Exploiting this vulnerability can allow a remote attacker to trigger a buffer overflow and execute arbitrary code on the device...

The vulnerability in the Bluetooth Network Encapsulation Protocol (BNEP) operating system’s profile allows a intruder to execute arbitrary code within the context of a privileged process.

The vulnerability in the Bluetooth Network Encapsulation Protocol BNEP service of the Android operating system lies in the loss of a whole bit. Exploiting this vulnerability allows an attacker to compromise the integrity of memory and gain full control over the device...

PT-2017-3401

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libhevc library. This vulnerability is associated...

PT-2017-3399

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 8.0 Description The issue is related to insufficient access control in the libutils library of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of a privileged...

PT-2017-3612

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to an improper buffer length calculation in the wma roam scan filter function, which leads to a buffer overflow. This can potentially allow an attacker to...

Android Security Bulletin—July 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of July 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

The vulnerability of the Windows operating system’s kernel allows a hacker to execute code within the context of a privileged process.

The vulnerability of the Windows operating system’s kernel is related to improper data handling in the device’s memory. Exploiting this vulnerability allows a local attacker to execute code within the context of a privileged process...

CVE-2017-0650

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0649

An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability...

CVE-2017-0651

An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android...

Information disclosure

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0636

An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0650

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

PT-2017-2326

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1 through 10 including Windows RT 8.1, Windows Server 2012 R2, Windows Server 2016, and versions 1511, 1607, 1703 Description The issue is related to the improper handling of data in device memory by the Windows...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of MediaTek’s Android operating system driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the kernel context. This issue is considered “high” because it requires compromising privileged...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MediaTek Video Driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the kernel context, thereby enabling the execution of malicious applications...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Secure Execution Environment Communicator driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the kernel context from a local malicious...