Wenlin Yang

Name of the Vulnerable Software and Affected Versions: Prague smart phones versions earlier than Prague-AL00AC00B211 Prague smart phones versions earlier than Prague-AL00BC00B211 Prague smart phones versions earlier than Prague-AL00CC00B211 Prague smart phones versions earlier than Prague-TL00AC01B211 Prague smart phones versions earlier than Prague-TL10AC01B211 Description: The Bdat driver has an integer overflow issue due to a lack of parameter validation. This can be exploited by an attacker who tricks a user into installing a malicious APP, which can then send a specific parameter to the driver, potentially leading to arbitrary code execution. Recommendations: For versions earlier than Prague-AL00AC00B211, update to Prague-AL00AC00B211 or later. For versions earlier than Prague-AL00BC00B211, update to Prague-AL00BC00B211 or later. For versions earlier than Prague-AL00CC00B211, update to Prague-AL00CC00B211 or later. For versions earlier than Prague-TL00AC01B211, update to Prague-TL00AC01B211 or later. For versions earlier than Prague-TL10AC01B211, update to Prague-TL10AC01B211 or later.

The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges.

The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation.

The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing arbitrary code execution.

The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing for arbitrary code execution.

The issue is related to a camera driver on the MTK platform, which has an arbitrary memory write vulnerability due to insufficient input verification. This can be exploited by an attacker who tricks a user into installing a malicious application with special privileges, allowing the attacker to send a specific parameter to the driver and cause privilege escalation.

The issue is related to an out-of-bound read. An attacker can trick a user into installing a malicious application on the smart phone and send a given parameter to cause memory out-of-bound read.

The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access vulnerabilities, leading to sensitive information leakage.

The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access issues, leading to sensitive information leakage.

An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions.

The touchscreen driver has a heap overflow issue, allowing attackers to crash the system or escalate user privileges.

The issue allows attackers to read arbitrary attachments via a crafted application that provides a pathname value. This is due to the failure of the AttachmentProvider.java in AOSP Mail to ensure that certain values are integers.

The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It may allow a remote attacker to elevate their privileges using a specially crafted application.

The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It can be exploited by a remote attacker using a specially crafted application to gain elevated privileges.

The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It allows remote attackers to gain privileges via a crafted application.