The vulnerability of the Android operating system, which allows a perpetrator to trigger a numerical overflow

The vulnerability of the Android operating system arises from a numerical overflow, which causes the system to enter a TOCTOU state in the PIL supervisor. Exploiting this vulnerability allows an attacker, operating remotely, to trigger the numerical overflow, thereby entering a race condition tha...

CVE-2016-8438: Integer Overflow or Wraparound

Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass Peripheral Image Loader PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR1023638...