Redmi 2A phone has command vulnerability in multiple devices

The Redmi 2A phone is a new model launched by Xiaomi on March 31, 2015, as a derivative of the Redmi 2 phone. The ioctl cmd=0x40046b0a for the Redmi 2A kernel device /dev/hx170dec and the ioctl cmd=0xc00c7503 handler function for /dev/comip-ureg lacks a validity judgment, which allows an attacker...