CVE-2014-2312

Name of the Vulnerable Software and Affected Versions thermald (affected versions not specified)

Description The issue allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid, potentially leading to unauthorized data modification. This is due to a flaw in the main function in android main.cpp.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.