Peter Pi

A vulnerability was discovered in Samsung Mobile Processors where they lack a check for the validation of native handles, which can result in a Denial of Service attack by unmapping an invalid length.

The issue is related to a race condition that can be exploited by an attacker who tricks the user into installing a malicious application. This application can cause multiple processes to operate on the same variable at the same time, potentially leading to the execution of malicious code.

The issue is related to a lack of protection for internal data in kernel components, including the ION subsystem, Binder, USB driver, and networking subsystem. This could allow a local malicious application to access data outside of its permission levels. The exploitation of this issue requires a privileged process to be compromised first. It is estimated as a moderate issue.

The issue is caused by a heap-based buffer overflow in the IOHIDFamily component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app. This can result in memory corruption.

The issue is related to the ION driver in the Android operating system, which has inadequate access control. This can be exploited by an attacker to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOFireWireFamily component.

The issue is related to the mediaserver in Android, which does not initialize certain data structures correctly. This allows attackers to obtain sensitive information via a crafted application. The problem is associated with the `IGraphicBufferConsumer.cpp` and `IGraphicBufferProducer.cpp` objects.

The issue is related to the mediaserver in Android, which does not initialize certain data structures correctly. This allows attackers to obtain sensitive information via a crafted application. The problem is associated with the IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp objects.

The issue concerns a component of the Android operating system, specifically the media/libmedia/IDrm.cpp in the mediaserver. It does not properly initialize a certain key-request data structure. This can be exploited by a remote attacker to obtain sensitive information from process memory, thereby bypassing an unspecified protection mechanism. The exploitation can be achieved via unspecified vectors, potentially allowing attackers to gain Signature or SignatureOrSystem access.

The issue exists due to the lack of validation for negative font property values in the Minikin library of the Android operating system. Exploitation of this issue can allow a local attacker to cause a denial of service (memory corruption) using a specially crafted font. Remote attackers can also cause a denial of service (memory corruption and reboot loop) via a crafted font.

The issue is caused by a buffer overflow in the media/libmedia/IOMX.cpp component of the mediaserver in the Android operating system. This can allow a remote attacker to obtain confidential information or bypass protection mechanisms. The vulnerability can be exploited to gain access to sensitive information from process memory, potentially allowing attackers to bypass an unspecified protection mechanism.

The issue is related to insufficient access control in the media/libmedia/IOMX.cpp component of the mediaserver in the Android operating system. Exploitation of this issue may allow a remote attacker to elevate their privileges using a specially crafted application. This can potentially allow attackers to gain privileges, such as obtaining Signature or SignatureOrSystem access.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of the issue may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of service.

The issue is caused by multiple integer overflows in the libeffects library in the mediaserver component of the Android operating system. This allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. The issue is related to the EffectBundle.cpp and EffectReverb.cpp files.

The issue exists due to the lack of initialization of a certain type of variable in the BnGraphicBufferConsumer::onTransact function. This allows a remote attacker to bypass protection mechanisms or obtain confidential information by triggering an ATTACH BUFFER action.

The issue is caused by a buffer overflow in the mediaserver component of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted media file.

The issue is related to the Media Framework component in Android, which lacks protection for certain data. This allows attackers to obtain sensitive information and bypass an unspecified protection mechanism. The exploitation can be done remotely.

A buffer overflow flaw was found in the Linux kernel's vhost functionality, which translates virtqueue buffers to IOVs and logs buffer descriptors during migration. This flaw can be exploited by a privileged guest user who can pass descriptors with invalid length to the host during migration, potentially increasing their privileges on the host. The issue is related to the vhost-net module, which is a network backend for virtio, and can be used to bypass isolation in systems based on QEMU-KVM.