Jack Tang

O problema está relacionado a um estouro de inteiro no driver de tela sensível ao toque FingerTipS, o que poderia levar a uma possível leitura fora dos limites. Isso pode resultar na divulgação de informações locais, exigindo privilégios de execução do sistema para a exploração. Não é necessária nenhuma interação do usuário para a exploração.

**Nome do software vulnerável e versões afetadas: Versões do kernel do Android (versões afetadas não especificadas) Descrição: O problema está relacionado a uma leitura fora dos limites do buffer na função fts driver test write do arquivo fts proc.c, um componente do driver Touch do kernel do Android. Isso pode levar à divulgação de informações locais, sendo necessários privilégios de execução do sistema para a exploração. Não é necessária nenhuma interação do usuário para a exploração. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

O problema está relacionado a um estouro de buffer de heap no driver da tela sensível ao toque FingerTipS, o que pode levar a uma escalada local de privilégios. Isso requer privilégios de execução do sistema e não necessita de interação do usuário para ser explorado.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue allows an attacker to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via a crafted app.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue allows local users to obtain sensitive kernel memory-layout information or cause a denial of service via unspecified vectors, potentially related to a use-after-free privilege escalation vulnerability in the DspFuncLib component.

The issue is related to a buffer overflow in the AppleGraphicsPowerManagement component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue is related to errors in pointer dereferencing in the IOAcceleratorFamily component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app. This can be achieved by a remote attacker using a specially created application.

The issue is caused by a buffer overflow in the Graphics Drivers subsystem of the operating system. This can be exploited by a remote attacker using a specially crafted application, potentially allowing them to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption.

The issue is related to the use of incorrect encryption keys for disk images in the Disk Utility component of Mac OS X. This could potentially allow a remote attacker to impact the confidentiality of information.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app. This is caused by a buffer overflow in the Disk Images subsystem of the operating systems.

The issue is caused by a buffer overflow in the IOAcceleratorFamily component of the operating systems. This can be exploited by a remote attacker using a specially crafted application, potentially allowing them to execute arbitrary code in a privileged context or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow in the IOAudioFamily component, allowing attackers to execute arbitrary code in a privileged context via a crafted app. This can be exploited by a remote attacker using a specially created application.

The issue is related to the History implementation in WebKit, which allows remote attackers to cause a denial of service. This can be achieved through a crafted web site, leading to resource consumption and application crash.

A remote code execution issue exists due to improper access to objects in memory. This could corrupt memory, allowing an attacker to execute arbitrary code in the context of the current user.