Pesquisadores
Voltar
Xuxian Jiang
Pesquisador de
C0RE Team
#278
de 60,450
618.6
CVSS total
Vulnerabilidades
·
72
Média
9
Alta
61
Crítica
2
PT-2017-3825
2017-09-08
5.5
CVE-2017-0779
Google
Android
The issue is related to an information disclosure vulnerability in the Android media framework, specifically in the `audioflinger` component. This vulnerability is associated with a lack of protection for sensitive data. Exploitation of this issue could allow a remote attacker to disclose protected information.
PT-2017-2871
2017-09-01
9.3
CVE-2017-0801
Mediatek
Libmtkomxvdec
The issue is related to a component of the Android operating system, specifically the MediaTek libmtkomxvdec, which has a flaw in access control. This flaw can be exploited by a remote attacker to elevate their privileges.
PT-2017-18245
2017-08-11
6.8
CVE-2017-8264
Google
Android
A userspace process can cause a Denial of Service in the camera driver.
PT-2017-10623
2017-08-09
7.8
CVE-2017-0731
Google
Android
A elevation of privilege vulnerability exists in the Android media framework, specifically in the mpeg4 encoder.
PT-2017-10630
2017-08-09
5.5
CVE-2017-0739
Google
Android
A information disclosure vulnerability exists in the Android media framework, specifically in libhevc. This issue may allow for the disclosure of sensitive information.
PT-2017-2847
2017-07-13
9.3
CVE-2017-0770
Google
Android
The issue is related to insufficient access control in the libmediaplayerservice library of the Android Media Framework. It allows a remote attacker to elevate their privileges.
PT-2017-2852
2017-07-10
9.3
CVE-2017-0765
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. Exploitation of this issue may allow a remote attacker to execute arbitrary code.
PT-2017-2494
2017-07-06
9.3
CVE-2017-0673
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control, which can be exploited by a remote attacker to execute arbitrary code.
PT-2017-2483
2017-07-06
9.3
CVE-2017-0684
Google
Android
The issue is related to an elevation of privilege vulnerability in the Android media framework, which can be exploited by a remote attacker to gain elevated privileges. This vulnerability is associated with inadequate access control in the Android operating system.
PT-2017-2479
2017-07-06
9.3
CVE-2017-0666
Google
Android
The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.
PT-2017-2480
2017-07-06
9.3
CVE-2017-0665
Google
Android
The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.
PT-2017-2481
2017-07-06
9.3
CVE-2017-0664
Google
Android
The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.
PT-2017-2486
2017-07-06
9.3
CVE-2017-0681
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework. It is also associated with insufficient access control in the Android operating system, which can allow a remote attacker to execute arbitrary code.
PT-2017-2493
2017-07-06
9.3
CVE-2017-0674
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.
PT-2017-2849
2017-06-15
9.3
CVE-2017-0768
Google
Android
The issue is related to insufficient access control in the libeffects library of the Android Media Framework, which can be exploited by a remote attacker to elevate their privileges.
PT-2017-10589
2017-06-14
4.7
CVE-2017-0651
Google
Android
An information disclosure issue in the kernel ION subsystem could allow a local malicious application to access data outside of its permission levels. This issue is considered low-severity because it requires compromising a privileged process first.
PT-2017-2320
2017-06-13
7.6
CVE-2017-7368
Google
Android
A race condition potentially exists in the ioctl handler of a sound driver in Android, caused by synchronization errors when using a shared resource. This issue may allow a remote attacker to cause a device to hang or deny service.
PT-2017-2880
2017-06-12
7.8
CVE-2017-0778
Google
Android
A information disclosure vulnerability in the Android media framework may allow a remote attacker to access protected data or execute arbitrary code in the context of a privileged process.
PT-2017-2770
2017-05-02
7.8
CVE-2017-10662
Linux
Linux Kernel
The issue is related to the `sanity check raw super` function in the Linux kernel, which does not properly validate the segment count. This allows local users to gain privileges via unspecified vectors. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
PT-2017-1439
2017-03-08
9.3
CVE-2017-0480
Google
Android
The issue is related to insufficient access control in the Audioserver application of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code in the context of a privileged process. This problem is considered high because it can be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.