Input validation

In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-10881

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to improper casting in the SurfaceFlinger::createLayer function of SurfaceFlinger.cpp. This could lead to arbitrary code execution, resulting in local escalation of...

ASB-A-137284057

In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...