CVE-2016-2457

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

CVE-2016-2453

The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705...

CVE-2016-2453

CVE-2016-2453 affects the MediaTek Wi‑Fi driver on Android One devices before 2016-05-01. The issue is a privilege-escalation vulnerability in the MediaTek Wi‑Fi driver that could let a crafted application gain elevated privileges (kernel context). The description does not specify exploited vecto...

CVE-2016-2457

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

CVE-2016-2456

CVE-2016-2456 affects the MediaTek Wi‑Fi driver in Android One devices (pre May 1, 2016). The issue is an elevation of privilege via a crafted app, tied to internal bug 27275187. Root cause details are not provided beyond this description. The Android Security Bulletin indicates patch levels of M...

CVE-2015-0570

CVE-2015-0570 is a stack-based buffer overflow in the SET_WPS_IE IOCTL in wlan_hdd_hostapd.c of the Linux kernel WLAN driver (3.x/4.x), as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and similar products. Exploitation requires a crafted application with a long ...

CVE-2016-2457

CVE-2016-2457 affects Android Wi‑Fi, specifically server/pm/UserManagerService.java, and is described as a bypass against restrictions on Wi‑Fi configuration changes via guest access in Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-05-01). The connected documents confir...

PT-2016-5163

Name of the Vulnerable Software and Affected Versions MediaTek Wi-Fi driver versions prior to 2016-05-01 Description The issue allows attackers to gain privileges via a crafted application. Recommendations For versions prior to 2016-05-01, update the MediaTek Wi-Fi driver to a version released...

PT-2016-1866

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-05-01 Description The issue is related to insufficient access control in the Wi-Fi component of the Android operating system, specifical...

PT-2016-1829

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-05-01 Description The issue is related to insufficient access control in the MediaTek Wi-Fi driver of the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafte...

CVE-2016-2453: Undefined Security Weakness

The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705...

CVE-2016-2456: Undefined Security Weakness

The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27275187...

CVE-2016-2457: Undefined Security Weakness

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

Android Wi-Fi power lifting vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. A privilege vulnerability exists in Android's Wi-Fi, which can be exploited by a local attacker with the help of a...

Android MediaTek Wi-Fi Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.MediaTek Wi-Fi Driver is one of the MediaTek wireless card drivers. An elevation of privilege vulnerability exists in MediaTek Wi-Fi Driver for Android. An attacker could exploit this...

Android Wi-Fi elevation of privilege vulnerability (CNVD-2016-02864)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. Android's Wi-Fi suffers from an elevation of privilege vulnerability. An attacker can use this vulnerability to modify a...

Google Patches More Trouble in Mediaserver

Google has re-branded its monthly patch release, bringing a new name and new scope to the newly renamed Android Security Bulletin. While that may be new, the content is definitely familiar. Once again, critical remote code execution Mediaserver vulnerabilities dominate this month’s patches...

The vulnerability of the microprogramming software of the Medialink MWN-WARP300N router allows a hacker to enhance their privileges.

The vulnerability of the web-management interface of the Medialink MWN-WARP300N router software relates to the use of default passwords for user accounts. Exploiting this vulnerability could allow an attacker to gain increased privileges by utilizing Wi-Fi sessions...

CVE-2016-2422

Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

Code injection

Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...