Google Patches 10 Critical Bugs in August Android Security Bulletin

Google patched 10 critical remote code execution bugs in its August Android Security Bulletin issued Monday. It warned the most severe RCE vulnerabilities could enable a remote attacker, using a specially crafted file, to execute arbitrary code within the context of a privileged process. The...

Google Nexus Qualcomm Crypto Engine Driver Privilege Escalation Vulnerability(CVE-2016-6738)

No description provided by source. https://github.com/jiayy/androidvulnpoc-exp/tree/master/EXP-CVE-2016-6738...

Trust Issues: Exploiting TrustZone TEEs

Posted by Gal Beniamini, Project Zero Mobile devices are becoming an increasingly privacy-sensitive platform. Nowadays, devices process a wide range of personal and private information of a sensitive nature, such as biometric identifiers, payment data and cryptographic keys. Additionally, modern...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14376)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14391)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14394)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14381)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14380)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14390)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-18950)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone of Google Android. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18947)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the DRM routine of TrustZone for Google Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14384)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14386)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-18943)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Google Android's TrustZone. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14397)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Google Android Qualcomm component has multiple vulnerabilities

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14387)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14392)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14388)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18946)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the QFPROM routine of TrustZone for Google Android. An attack could exploit the vulnerability to perform unauthorized operations...