CVE-2022-20156

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20156

CVE-2022-20156 is an elevation-of-privilege vulnerability in Android’s graphics path: specifically, an issue in the unflatten path of GraphicBuffer.cpp that allows arbitrary code execution via improper input validation. Exploitation is local and does not require user interaction. The impact is st...

CVE-2022-20156

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20156: Improper Input Validation

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2018-9547

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2018-9547

CVE-2018-9547 impacts Android 8.1 and 9, specifically the GraphicBuffer.cpp unflatten path. Description: a bad file descriptor close due to insufficient input validation could allow local escalation of privilege in the system server, with no user interaction required. The issue affects the Androi...

CVE-2018-9547: Improper Input Validation

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2015-1474: Undefined Security Weakness

Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service memory corruption via vectors that trigger a large number of 1 file descriptors or 2...