CVE-2017-13184: Use After Free

In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for...

PT-2018-5495

Name of the Vulnerable Software and Affected Versions: Android versions 8.0, 8.1 Description: The issue is related to a possible use after free of mVSyncInjector in the enableVSyncInjections function of SurfaceFlinger. This could lead to a local elevation of privilege, enabling code execution as ...