PT-2024-36859 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-07343-ga727812a8d45 Description: The issue arises from a race condition in the binder add freeze work function, where the iteration over proc-nodes can be disrupted by binder deferred release, leading to ...

PT-2024-36857 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel. The issue occurs when a freeze notification is cleared with BC CLEAR FREEZE NOTIFICATION before calling binder freeze...

CVE-2018-11816

Crafted Binder Request Causes Heap UAF in MediaServer...

CVE-2018-11816 Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer...

CVE-2018-11816 Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer...

PT-2024-10610 · Unknown · Mediaserver

Name of the Vulnerable Software and Affected Versions: MediaServer affected versions not specified Description: A crafted Binder request can cause a heap use-after-free UAF issue in MediaServer. This issue may lead to unspecified consequences, but specific details about the impact or potential...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the binder component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the binder component in the Linux operating system’s kernel is related to errors at the bindergetobject function. Exploiting this vulnerability allows an attacker to execute arbitrary code...

kernel: aio: fix use-after-free due to missing POLLFREE handling

In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special in that they use a waitqueue whose lifetime is the current task, rather than the struct file as is normally the case. This is okay f...

ROS-20241101-01

A vulnerability in the sysfs component of the Linux operating system kernel is related to excessive output in the sysfsbreakactiveprotection function in fs/sysfs/file.c. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information Vulnerability in the clk...

DEBIAN-CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

UBUNTU-CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

PT-2024-36860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the binder add freeze work function. This issue arises when the proc-inner lock is temporari...

PT-2024-36858 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-rc7-00382-gfc6c92196396 Description: A use-after-free issue was discovered in the Linux kernel, specifically in the binder component. This issue occurs when a binder reference is cleaned up, but the...

binder: fix UAF caused by offsets overwrite

...

PT-2025-3748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There is a potentia...

SUSE CVE-2024-46740

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied individually into the target buffer during transactions. Any raw data in-between these objects is copied as well. However, this raw data copy lac...