Oldfresher

O problema está relacionado a um uso após liberação (use after free) no driver synx, que ocorre durante múltiplas invocações de chamadas de liberação do synx enquanto outras funções são executadas.

O problema está relacionado a um possível estouro de buffer devido à falta de verificação do comprimento do parâmetro durante a análise do IE de varredura de MBSSID. Isso pode ser explorado por um invasor remoto para comprometer a confidencialidade, a integridade e a disponibilidade das informações protegidas. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações sobre incidentes reais em que essa vulnerabilidade tenha sido explorada.

The issue is related to an information disclosure vulnerability in the Qualcomm audio driver. It affects Android products.

The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges.

The issue allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is due to type confusion in V8.

The issue is caused by synchronization errors when using a shared resource in the libgui library of the Android operating system. This allows a remote attacker to potentially elevate their privileges.

The issue is related to an elevation of privilege vulnerability in the Broadcom Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application.

An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions.

The touchscreen driver has a heap overflow issue, allowing attackers to crash the system or escalate user privileges.

The issue is related to the mishandling of certain crashes in the Skia library, specifically in the include/core/SkPostConfig.h file, as used in the System server component of Android. This allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. The vulnerability is associated with inadequate access control, which can be exploited by a remote attacker to elevate their privileges, leading to a denial of service.