171 matches found
CVE-2020-0114
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...
Design/Logic Flaw
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...
CVE-2018-16265
The bt/btcore system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
CVE-2018-9524
CVE-2018-9524 affects Android System UI where protections around overlay windows are insufficient, enabling local elevation of privilege. Affects Android 7.0–8.1; exploitation requires user interaction. The issue is documented in public CVE records (NVD/NVD 2018-9524) and is addressed in the Andr...
CVE-2018-9524
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
PT-2018-19028
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1 Description The issue is related to insufficient protections around overlay windows in the System UI functionality. This could lead to local escalation of privilege without needing additional execution...
CVE-2018-9524: Improper Restriction of Rendered UI Layers or Frames
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...
Integer overflow
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...
CVE-2017-18172
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...
PT-2018-6706
Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile versions MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon High Med 2016...
CVE-2017-18172: Integer Overflow or Wraparound
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD...
Google Android pci sysfs elevation of privilege vulnerability
Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. An elevation of privilege...
Google Android System (system ui) Denial of Service Vulnerability (CNVD-2018-09466)
Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. A denial of service vulnerability...
Google Android System (system ui) Denial of Service Vulnerability
Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with System system ui as one of the System system ui is one of the system UI components. A denial of service vulnerability...
CVE-2017-13302
A denial of service vulnerability in the Android system system ui. Product: Android. Versions: 8.0. Android ID: A-69969749...
Denial of service
A denial of service vulnerability in the Android system system ui. Product: Android. Versions: 8.0. Android ID: A-66498711...