Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android 13 suffers from a security vulnerability that stems from a privilege bypass in Midi, with the potential to learn about private midi devices, which could lead to local privilege escalation...

kernel: use-after-free in kernel midi subsystem

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the MIDI subsystem of Google Chrome’s browser midimanager.cc, midimanageralsa.cc, and midimanagermac.cc is related to deficiencies in data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure termination of th...