Wish_Wu

A falha permite que um modelo 3D criado para se parecer com o usuário cadastrado seja autenticado via Face ID. Isso se deve a modelos anti-spoofing inadequados. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado.

The issue allowed a 3D model constructed to look like the enrolled user to authenticate via Face ID. This was addressed by improving Face ID machine learning models.

A remote code execution issue in libgdx could allow an attacker to execute arbitrary code in the context of an unprivileged process by using a specially crafted file. This issue is considered High due to the possibility of remote code execution in an application that uses this library.

The issue is related to insufficient access control in the Qualcomm ARM component of the Android operating system. It can be exploited by a local attacker using a specially crafted application to gain elevated privileges.

The issue is related to a component of the Qualcomm performance in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application.