Rahul D Kankrale

The issue is related to improper access control in SemWifiApBroadcastReceiver, allowing an attacker to reset a setting value related to mobile hotspot.

The issue is related to an improper caller check in AR Emoji, which allows untrusted applications to use some camera functions via deeplink.

The issue is caused by improper buffer size check logic in the aviextractor library, allowing out of bounds read and potentially leading to temporary denial of service. The patch for this issue adds buffer size check logic to prevent such occurrences.

An inconsistent user interface issue was addressed with improved state management. Visiting a malicious website may lead to address bar spoofing.