Lubo Zhang

A race condition potentially exists in the ioctl handler of a sound driver in Android, caused by synchronization errors when using a shared resource. This issue may allow a remote attacker to cause a device to hang or deny service.

An elevation of privilege issue in the kernel ION subsystem could allow a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. This may require reflashing the operating system to repair the device. The issue is related to insufficient access control in the ION subsystem.

A remote denial of service issue in libskia could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to inadequate access control in the libskia service of the Android operating system. The exploitation of this issue may enable a remote attacker to cause device hang or reboot using a specially crafted file.

The issue is related to insufficient access control in the Qualcomm sound driver of the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel, but first requires compromising a privileged process. This problem is considered high-risk.

The issue is related to the NVIDIA video driver in Android, which has inadequate access control. This allows an attacker to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified.

The issue is related to a NULL pointer dereference error in the Qualcomm Avtimer driver, which can lead to information disclosure. A local malicious user could exploit this to obtain sensitive information.