The vulnerability of the VPU_IOCX_OPEN_INSTANCE() and vpu_put_inst() functions in the VPU operating system driver for Android allows a hacker to cause a service failure.

The vulnerability of the VPUIOCXOPENINSTANCE and vpuputinst functions in the VPU operating system driver of Android is related to the use of memory after it is freed, as a result of retrieving the driver instance from an array and resetting the reference counter before closing it. Exploiting this...