Chenfu Bao

The issue allows information disclosure for the kernel. A user could set an arbitrary kernel address, potentially leading to information disclosure. This occurs when a kernel memory address is passed from userspace through the `iris vidioc s ext ctrls` ioctl.

The issue is caused by an off-by-one error in a camera driver, which can lead to an out-of-bounds read/write.

The issue is related to an elevation of privilege vulnerability in the Upstream kernel scsi driver. This affects the Android product.

A denial of service issue exists in the Android media framework, specifically in the hevc decoder. This issue may allow for a denial of service attack.

A denial of service issue exists in the Android media framework, specifically in libavc.