CVE-2021-30355

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root...

CVE-2021-30355

CVE-2021-30355 affects Amazon Kindle e-reader firmware up to version 5.13.4. The issue is a local privilege escalation where the Kindle framework user can elevate to root due to improper privilege management. A related chain involves a heap overflow in the PDF rendering path (CVE-2021-30354) that...