OSV-2020-22 Container-overflow in parquet::schema::Unflatten

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20897 Crash type: Container-overflow READ 4 Crash state: parquet::schema::Unflatten parquet::FileMetaData::FileMetaDataImpl::FileMetaDataImpl parquet::FileMetaData::FileMetaData...

Linux kernel resource management error vulnerability (CNVD-2019-41702)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'unittestdataadd' function in the drivers/of/unittest.c file in versions of Linux kernel prior to 5.3.10. The...

Prototype Pollution

Overview All versions of unflatten are vulnerable to prototype pollution. The function unflatten does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently...

DEBIAN-CVE-2019-19049

A memory leak in the unittestdataadd function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service memory consumption by triggering offdtunflattentree failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because...

Vulnerability of the GraphicBuffer::unflatten() function in the Android operating system, allowing attackers to escalate their privileges

The vulnerability of the GraphicBuffer::unflatten function in the Android operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2018-9547

In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

Android Region::unflatten function integer overflow vulnerability

Android is a mobile operating system based on the Linux open kernel, and Mediaserver is one of the multimedia service components. An integer overflow vulnerability exists in the 'Region::unflatten' function in the libs/ui/Region.cpp file in Android Mediaserver. An attacker can exploit this...

CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

Integer overflow

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

UBUNTU-CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

Android-libcutils library integer overflow leading to heap damage vulnerability discovery and exploit-vulnerability warning-the black bar safety net

Before reading this article, you best understand the Android Binder mechanism, for graphics system BufferQueue principle, the heap Manager jemalloc the basic principles. This article describes how to use the libcutils library stack damage vulnerability get systemserver permissions, this...

Android 'GraphicBuffer::unflatten' function integer overflow vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. An integer overflow exists in the 'GraphicBuffer::unflatten' function in the platform/frameworks/native/libs/ui/GraphicBuffer.cpp file in Android 5.0 and earlier versions. vulnerabilit...

Android Integer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow exists in the 'GraphicBuffer::unflatten' function in the platform/frameworks/native/libs/ui/GraphicBuffer.cpp file in Android 5.0 and earlier versions...