Patched Android Libutils Vulnerability Harkens Back to Stagefright

This week’s Android Security Bulletin patched a calamity of vulnerabilities that threatened almost every device in circulation and illustrated the fragility of the Android ecosystem. The bulletin addressed more than 50 vulnerabilities, including nine rated critical by Google because of the...

Google Shares Android Nougat, Safe Browsing Security Enhancements

Google this week shared with developers security enhancements it has added to the new Nougat version of Android and additional security features for webmasters via Safe Browsing to help pinpoint harmful content on websites. Under the banner of its nine-year-long Safe Browsing initiative, Google...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the app/aboot/aboot.c file of the Qualcomm Android operating system is due to a numerical overflow. Exploiting this vulnerability allows a local attacker to increase their privileges using a specially crafted boot image...

Google Patches Quadrooter Vulnerabilities in Android

The Quadrooter vulnerabilities made a lot of people take notice because the scale of affected Android devices more than 900,000 put it on a level with Stagefright and other bugs that impact a large majority of the Android ecosystem. Some details on the four vulnerabilities were publicly disclosed...

Qualcomm Innovation Center Android contributions for MSM buffer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. QuIC Android...

Qualcomm Innovation Center Android contributions for MSM integer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. An integer...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of data length checking. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c file of Qualcomm’s Android operating system is related to insufficient checking of input parameters. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially created...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c component of Qualcomm’s Android operating system is related to the lack of checks on frame messages in CPP. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially create...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/video/msm/vidc/common/enc/venc.c file in Qualcomm’s Android operating system is related to the lack of checking for the ioctl VENIOCTLGETSEQUENCEHDR call. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially creat...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of checks for ioctl calls. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the mdss mdp3 driver components of Qualcomm’s Android operating system is related to the lack of data validation for user space. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the CORE/SYS/legacy/src/utils/src/dot11f.c file in Qualcomm’s Android operating system lies in buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted control information element IE in the 802.11...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/char/diag/diagdci.c file in Qualcomm’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application that sends short request packet...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/char/diag/diagfwd.c file in Qualcomm’s Android operating system is related to improper handling of whole numbers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges through a specially created application...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3070-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3070-3 advisory. A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the sound/soc/msm/qdsp6v2/msm-lsm-client.c file of the Qualcomm Android operating system is related to the lack of checks on certain user-space data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information through a...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of guarantees that certain lines end with the character '\0'. Exploiting this vulnerability could allow a remote attacker to obtain confidential information through a specially creat...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/video/msm/mdss/mdssmdppp.c file of Qualcomm’s Android operating system is related to an incorrect determination of the data size of the Gamut LUT. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially...