Code injection

An issue was discovered on Samsung mobile devices with M6.0 and N7.x Exynos7420 or Exynox8890 chipsets software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 April 2017...

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20625

Summary: CVE-2019-20625 affects Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets). The issue is due to the ion debugfs driver, which can disclose information. The Samsung internal identifier is SVE-2018-13427 (Feb 2019). What’s affected / root cause: An information disclosure flaw i...

CVE-2019-20582

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos9810 chipsets software. There is a use after free in the ion driver. The Samsung ID is SVE-2019-14837 August 2019...

CVE-2019-20582

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos9810 chipsets software. There is a use after free in the ion driver. The Samsung ID is SVE-2019-14837 August 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos9810 chipsets software. There is a use after free in the ion driver. The Samsung ID is SVE-2019-14837 August 2019...

CVE-2019-20582

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos9810 chipsets software. There is a use after free in the ion driver. The Samsung ID is SVE-2019-14837 August 2019...

CVE-2019-14049

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

Design/Logic Flaw

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

CVE-2019-14049

CVE-2019-14049 describes a Stage-2 fault during writes to an ION system allocation assigned to non-HLOS memory in Qualcomm-based Snapdragon platforms (across multiple product lines such as Snapdragon Auto/Compute/Mobile) with non-standard memory usage. The flaw is presented as a memory/write-proc...

CVE-2019-14049

Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

October 2019 - What's New in Web Performance?

Today, Akamai announced the October 2019 Release, which introduces new capabilities to the Performance product line with a focus on helping customers deliver superior experiences with the power of the Edge. Here are some highlights from the release with additional detail below. EdgeWorkers enable...

Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access Exploit

/ Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access For constructors, Spidermonkey implements a "definite property analysis" 1 to compute which properties will definitely exist on the constructed objects. Spidermonkey then directly allocates the constructed objects with the final...

The vulnerability of the ION memory distribution subsystem of the Android operating system allows a hacker to modify data on the device and gain root privileges.

The vulnerability of the ION memory distribution subsystem of the Android operating system is related to deficiencies in access control between applications and the operating system. Exploiting this vulnerability allows a remote attacker to modify data on the device and gain root privileges throu...

CVE-2018-3574

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the IONFLAGSECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which...

CVE-2018-3574

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the IONFLAGSECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which...

Design/Logic Flaw

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the IONFLAGSECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which...

UBUNTU-CVE-2018-3574

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the IONFLAGSECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which...