The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...

Design/Logic Flaw

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset in function UnpackCore is increased for each loop, while there is no boundary check against "pIe-arraybound"...