Max Spector

The issue is related to insufficient access control in the Audioserver of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of a privileged process. This problem is considered high because it can be used to gain access to higher-level capabilities that are not normally accessible to third-party applications. A local malicious application can exploit this issue to execute arbitrary code within the context of a privileged process, gaining local access to elevated capabilities.

The issue allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and send premium SMS messages during the Setup Wizard provisioning stage. This is possible via unspecified vectors.

The issue allows physically proximate attackers to bypass the Factory Reset Protection mechanism by accessing certain features during a pre-setup stage, including an external tile from a system application, the help feature, or the Settings application.

The issue is related to the libstagefright component in the mediaserver of the Android operating system, which does not validate OMX buffer sizes for the GSM and G711 codecs. This allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. The exploitation of this issue can enable a remote attacker to elevate their privileges using a specially crafted application.