CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

CVE-2019-15234

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

CVE-2019-15234

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

Design/Logic Flaw

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

Design/Logic Flaw

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

CVE-2019-15234

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

CVE-2019-15234

CVE-2019-15234 affects SHAREit (v4.0.6.177 and earlier). The issue is that the application does not check the full message length from the received packet header, which is used to allocate memory for the next data set. This can cause uncontrolled memory allocation and a denial of service. The con...

CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

CVE-2019-14941

CVE-2019-14941 affects SHAREit (v4.0.6.177 and earlier) where the implementation fails to validate the body length specified in the packet header. This can cause uncontrolled memory allocation and a denial-of-service condition. Connected records corroborate the issue across diverse feeds (NVD/Red...

CVE-2019-9938

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

Authentication flaw

The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...

CVE-2019-9939

The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...

Code injection

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

CVE-2019-9939

The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...

CVE-2019-9938

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

CVE-2019-9939

The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...

CVE-2019-9939

The CVE describes an authentication bypass in the SHAREit Android app prior to version 4.0.36. When a user initiates file transfer, an attacker on the same network or on public open hotspots created by the app can request a non-existent page; the app responds with HTTP 200 and an empty page and, ...

CVE-2019-9938

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

CVE-2019-9938

The CVE-2019-9938 issue affects the Android SHAREit app prior to version 4.0.42. A remote attacker on the same network or connected to public open hotspots created by the app can download arbitrary files from the device (contacts, photos, videos, sound clips, etc.) after authenticating as a recog...