CVE-2012-4221

CVE-2012-4221 involves an integer overflow in the Qualcomm Innovation Center (QuIC) Diagnostics (DIAG) kernel-mode driver for Android 2.3–4.2, specifically in diagchar_core.c. An attacker could exploit crafted arguments via a local diagchar_ioctl call to achieve arbitrary code execution or cause ...

CVE-2012-3979

CVE-2012-3979 : The OpenVAS/Nessus entries indicate a vulnerability in Mozilla Firefox for Android where insecure use of __android_log_print can be triggered by a crafted web page using the dump() function, potentially allowing remote code execution. The issue is tied to Firefox for Android speci...

CVE-2011-3874

CVE-2011-3874 describes a use-after-free vulnerability in Android’s libsysutils, triggered via FrameworkListener::dispatchCommand when invoked with an incorrect number of arguments. Affected Android versions are 2.2.x–2.2.2 and 2.3.x–2.3.6. The issue was demonstrated by zergRush and, per sources,...

CVE-2011-3918

The CVE-2011-3918 entry concerns the Android Zygote process: on Android 4.0.3 and earlier, Zygote accepts fork requests from processes with arbitrary UIDs, enabling a crafted app to cause a denial-of-service reboot loop. The issue is described in multiple sources (e.g., NVD/Red Hat entries) and i...

CVE-2012-4220

CVE-2012-4220 / CVE-2012-4221 affect the Qualcomm DIAG kernel-mode driver for Android 2.3–4.2. diagchar_core.c (CVE-2012-4220) and diagchar_core.c with an untrusted pointer dereference (CVE-2012-4221) allow a local application to exploit crafted arguments via diagchar_ioctl to execute arbitrary c...

CVE-2012-6301

The CVE-2012-6301 issue affects Android 4.0.3’s Stock/Browser component. A remote attacker can trigger a denial of service (application crash) by presenting a crafted market: URI in the SRC attribute of an IFRAME element. Multiple connected sources corroborate the vulnerability and describe its i...

CVE-2012-4222

CVE-2012-4222 refers to the Qualcomm KGSL kernel-mode driver in Android 2.3–4.2, where a crafted kgsl_ioctl input can trigger a NULL pointer dereference, causing DoS. Connected docs also cover CVE-2012-4220 (diagchar_core.c) and CVE-2012-4221 (diagchar_core.c/integer overflow) with local DIAG/DIA...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...