Google Android Media framework remote code execution vulnerability (CNVD-2018-06666)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06665)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06662)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06663)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

Google Android Media framework remote code execution vulnerability (CNVD-2018-06661)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android Media framework. An attacker can exploit the vulnerability to execute arbitrary code in the context of a privileged...

The vulnerability of the Android operating system’s libhevc library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libhevc library arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process remotely...

Vulnerability of the `ihevcd_allocate_static_bufs` and `ihevcd_create` functions in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ihevcdallocatestaticbufs and ihevcdcreate/media/libstagefright/codecs/hevcdec/SoftHEVC.cpp functions in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process from a remote location...

The vulnerability of the Android operating system’s libutils library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libutils library is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process, using a specially crafted file...

The vulnerability of the MediaTek CCCI driver for the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the MediaTek CCCI driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute arbitrary code within a privileged process...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a perpetrator to execute arbitrary code within the context of a privileged process using a specially crafted file...

CVE-2017-6258

NVIDIA libnvmmliteaudio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-38027496...

CVE-2018-6593

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

The vulnerability of the NVIDIA graphics processor driver for the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of NVIDIA’s graphics driver gm20bclkthrotsetcdevstate in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within a privileged process...

CVE-2017-13208

In receivepacket of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation...

Heap overflow

In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android kernel...

Remote code execution

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-13183

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...

CVE-2017-13184

In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...