Jake Corina

The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to improper authorization configuration on specific device information, leading to a permission control problem.

The issue is related to an elevation of privilege vulnerability in the MediaTek kernel, affecting Android products.

The issue is related to an elevation of privilege vulnerability in the MediaTek command queue driver. It could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the MediaTek driver.