Wang Qize

The issue is related to a heap overflow flaw in the Marvell WiFi chip driver of the Linux kernel. This flaw allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code with root permissions, affecting the confidentiality and integrity of files on the system.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.16 Description: The issue allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call. This is due to a problem in the acpi smbus hc add function in drivers/acpi/sbshc.c. Recommendations: For Linux kernel versions prior to 4.14.16, update to version 4.14.16 or later to resolve the issue.

The issue allows attackers to disable the PXN defense mechanism, potentially leading to system crashes or privilege escalation by invoking related drive code.

The video driver in the affected smartphones allows attackers to cause a denial of service, resulting in a device reboot, via a crafted application.

A heap-based buffer overflow in the HIFI driver allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.