Scottybauer1

A remote code execution issue exists in the Broadcom networking driver. This affects Android products.

A remote code execution issue in the Surfaceflinger service could allow an attacker to cause memory corruption during media file and data processing by using a specially crafted file. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. The vulnerability is caused by a buffer overflow in memory, which can be exploited by a remote attacker to inject arbitrary code.

An information disclosure issue in Qualcomm components, including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver, could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process.

The issue is related to errors in frame handling in the decoder/ih264d parse pslice.c file of the Android mediaserver. It allows a remote attacker to cause a denial of service, resulting in device hang or reboot, by using a specially crafted media file.

The issue is related to the mediaserver in Android, which does not limit process-memory usage. This allows remote attackers to cause a denial of service, resulting in a device hang or reboot, via a crafted media file.

The issue is related to an integer signedness error in the MSM QDSP6 audio driver. This error can be exploited by attackers to gain privileges or cause a denial of service, resulting in memory corruption. The exploitation is possible via a crafted application that makes an ioctl call.