EUVD-2019-18720

Malware in sbrugna...

CVE-2019-9345

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2019-9345

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

Design/Logic Flaw

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2019-9345

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2019-9345

CVE-2019-9345 affects the Android kernel (sdcardfs) and describes a local elevation of privilege due to shared mapping of OBB files that can breach profile data separation. The vulnerability is classified as Elevation of Privilege (High) in the Kernel component per Pixel update bulletin, with loc...

CVE-2019-9345: Undefined Security Weakness

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

PT-2019-19560

Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue concerns a possible violation of the separation of data between profiles due to shared mapping of obb files in the sdcardfs component of the Android kernel. This could...

Android kernel sdcardfs_create sdcardfs_mkdir Privilege Escalation

The vulnerabilities of the sdcardfscreate and sdcardfsmkdir functions in inode.c of the Android operating system stem from operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

Android - sdcardfs Changes current->fs Without Proper Locking Exploit

Exploit for Android platform in category dos / poc Tested on a Pixel 2 walleye: ro.build.abupdate: true ro.build.characteristics: nosdcard ro.build.date: Mon Jun 4 22:10:18 UTC 2018 ro.build.date.utc: 1528150218 ro.build.description: walleye-user 8.1.0 OPM2.171026.006.G1 4820017 release-keys...

Android - sdcardfs Changes current-fs Without Proper Locking

Android - sdcardfs Changes current-fs Without Proper Locking Tested on a Pixel 2 walleye: ro.build.abupdate: true ro.build.characteristics: nosdcard ro.build.date: Mon Jun 4 22:10:18 UTC 2018 ro.build.date.utc: 1528150218 ro.build.description: walleye-user 8.1.0 OPM2.171026.006.G1 4820017...

Android - sdcardfs Changes current->fs Without Proper Locking

Tested on a Pixel 2 walleye: ro.build.abupdate: true ro.build.characteristics: nosdcard ro.build.date: Mon Jun 4 22:10:18 UTC 2018 ro.build.date.utc: 1528150218 ro.build.description: walleye-user 8.1.0 OPM2.171026.006.G1 4820017 release-keys ro.build.display.id: OPM2.171026.006.G1...

PT-2018-1631

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to improper locking in the sdcardfs create and sdcardfs mkdir functions of inode.c, which could lead to memory corruption. This might allow for local escalation of privilege without needing...

PT-2018-1630

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the sdcardfs open function in the Android kernel, specifically in the file.c file. It involves a buffer overflow in memory, which could allow an attacker to escalate their privileges. The...