Nathan Crandall

O problema está relacionado a um estouro de buffer baseado em heap no componente received data do módulo gweb no ConnMan. Isso pode ser explorado por invasores remotos que enviem solicitações HTTP ao componente gweb, permitindo-lhes, potencialmente, executar código arbitrário. A vulnerabilidade está associada a um estouro de buffer, o que pode levar à execução de código.

The issue allows kernel memory contents to leak to system logs if a userspace string is not NULL-terminated.

A race condition exists in a QTEE driver in the Linux kernel used by Android releases from CAF, potentially leading to an arbitrary memory write.

The UNIX IPC layer in WebKit does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service of the UI process. This issue does not affect Apple products.

The issue arises from improper validation of message size metadata in the UNIX IPC layer of WebKit, including WebKitGTK+. This allows a compromised secondary process to trigger an integer overflow, leading to a subsequent buffer overflow in the UI process. It is noted that this issue does not affect Apple products.

The issue is related to insufficient access control in the NVIDIA video driver for the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel. This could lead to a local permanent device compromise, requiring reflashing the operating system to repair the device.

A stack-based buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. The estimated number of potentially affected devices worldwide is not available.

The issue is related to an integer overflow in the `nvhost job.c` file of the NVIDIA video driver for Android. This overflow can lead to a buffer overflow, causing a denial of service, which results in a system crash. The exact vectors that trigger this issue are not specified.

A buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided.

The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process.

The issue is related to an information disclosure vulnerability in the HTC sound codec driver, which could allow a local malicious application to access data outside of its permission levels. This is rated as Moderate because it first requires compromising a privileged process.

The issue is related to insufficient access control in the NVIDIA GPU driver for the Android operating system, allowing a remote attacker to launch an application with the privileges of the current user. A local malicious application can execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. This may require reflashing the operating system to repair the device.

The issue is related to the NVIDIA media driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application.

The issue is related to insufficient access control in the NVIDIA media driver for the Android operating system. It can be exploited by a local attacker using a specially crafted application to elevate their privileges.