Oldfresher

**Nome do software vulnerável e versões afetadas** Snapdragon Connectivity (versões afetadas não especificadas) Snapdragon Industrial IoT (versões afetadas não especificadas) Snapdragon Mobile (versões afetadas não especificadas) **Descrição** O problema está relacionado a um uso após liberação (use after free) no driver synx, que ocorre durante múltiplas invocações de chamadas de liberação do synx enquanto outras funções são executadas. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Software da plataforma incorporada da Qualcomm (versões afetadas não especificadas) **Descrição** O problema está relacionado a um possível estouro de buffer devido à falta de verificação do comprimento do parâmetro durante a análise do IE de varredura de MBSSID. Isso pode ser explorado por um invasor remoto para comprometer a confidencialidade, a integridade e a disponibilidade das informações protegidas. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações sobre incidentes reais em que essa vulnerabilidade tenha sido explorada. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Android Kernel **Description** The issue is related to an information disclosure vulnerability in the Qualcomm audio driver. It affects Android products. **Recommendations** For Android Kernel, apply the fix referenced by Android ID: A-35764875 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16 Huawei P9 Plus versions earlier than VIE-AL10BC00B356 **Description** The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges. **Recommendations** For Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16, update to version H60-L02 6.12.16 or later. For Huawei P9 Plus versions earlier than VIE-AL10BC00B356, update to version VIE-AL10BC00B356 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 61.0.3163.79 Google Chrome for Android version prior to 61.0.3163.81 Opera (affected versions not specified) **Description** The issue allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is due to type confusion in V8. **Recommendations** For Google Chrome versions prior to 61.0.3163.79, update to version 61.0.3163.79 or later. For Google Chrome for Android version prior to 61.0.3163.81, update to version 61.0.3163.81 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 7.0, 7.1.1, 7.1.2 **Description** The issue is caused by synchronization errors when using a shared resource in the libgui library of the Android operating system. This allows a remote attacker to potentially elevate their privileges. **Recommendations** For Android versions 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10, Kernel-3.18 **Description** The issue is related to an elevation of privilege vulnerability in the Broadcom Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application. **Recommendations** For Android versions Kernel-3.10, Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.18 **Description** An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions. **Recommendations** For Android version Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei P9 phones versions prior to EVA-AL10C00B192 Huawei Honor 6 phones versions prior to H60-L02 6.10.1 **Description** The touchscreen driver has a heap overflow issue, allowing attackers to crash the system or escalate user privileges. **Recommendations** For Huawei P9 phones versions prior to EVA-AL10C00B192, update to version EVA-AL10C00B192 or later to resolve the issue. For Huawei Honor 6 phones versions prior to H60-L02 6.10.1, update to version H60-L02 6.10.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-04-01 **Description** The issue is related to the mishandling of certain crashes in the Skia library, specifically in the include/core/SkPostConfig.h file, as used in the System server component of Android. This allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. The vulnerability is associated with inadequate access control, which can be exploited by a remote attacker to elevate their privileges, leading to a denial of service. **Recommendations** For Android versions 4.x through 4.4.3, update to version 4.4.4 or later. For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-04-01, update to a version released after 2016-04-01.