Adam Donenfeld

A memory corruption issue was addressed with improved state management. A local user may be able to cause unexpected system termination or read kernel memory.

An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input validation.

The issue involves the `Graphics Driver` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue involves the `AVEVideoEncoder` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned effects.

The issue involves the `AVEVideoEncoder` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned effects.

The issue is related to the AVEVideoEncoder component and involves a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted app.

The issue involves the AVEVideoEncoder component and is caused by a buffer overflow in memory. This allows a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a specially crafted app.

The issue involves the `AVEVideoEncoder` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned effects.

The issue involves the AVEVideoEncoder component and is caused by a buffer overflow in memory. This allows a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a specially crafted app.

The issue involves the `IOSurface` component and is related to insufficient access control. A race condition in this component allows attackers to execute arbitrary code in a privileged context via a crafted app. This can be exploited by a remote attacker to gain privileged access.

The issue involves the `AVEVideoEncoder` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned effects.

The issue allows attackers to gain privileges via a crafted application. This affects devices including Nexus 5, 5X, 6, 6P, and 7 (2013).