Google Android Input Validation Error Vulnerability (CNVD-2023-43881)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that originates in the PowerVRSRVBridgePhysmemImportSparseDmaBuf component of the PowerVR kernel driver component where the lack of size checking means that an integer overflow allowing out-of-bounds heap access may exist. A remote attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute arbitrary shell commands with root user privileges.