A vulnerability was found in F2FS touch driver in kernel where there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Source link
RELATED STORIES
Third Generation Gangs Strategic Note No. 27: COVID-19 and Transnational Italian Mafias | #cyberfraud | #criminal...
近日，韩国手机厂商LG公司发布了影响过去7年LG安卓智能手机的漏洞补丁，该漏洞CVE编号为CVE-2020-12753，影响LG智能手机的bootloader 组件。 与安卓操作系统不同，bootloader是与每个智能手机厂商的固件相对应的。是用户启动设备后运行的第一部分代码，确保智能手机固件和安卓操作系统以正确和安全的方式启动。 高通安卓启动过程如下： 而在实践中，设备的启动过程并没有那么简单，因为厂商一般都会对启动过程做一些修改。LG设备的启动过程中，对其他登陆和调试就行了修改、对SIM解锁假日了额外的TEE验证，在aboot中加入了厂商特定的快速启动命令等。 漏洞分析. Source link
Executive Summary Informations Name CVE-2020-13848 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...
Executive Summary Informations Name CVE-2020-12851 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...
Executive Summary Informations Name CVE-2020-11682 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...
By Jessie Huang (Mobile Threats Analyst) We recently saw two barcode reader apps in Google...
Executive Summary Informations Name CVE-2020-10702 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...
Executive Summary Informations Name CVE-2020-11679 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...
Executive Summary Informations Name CVE-2020-7661 First vendor Publication 2020-06-04 Vendor Cve Last vendor Modification 2020-06-04...