CVE-2024-53838

A security vulnerability exists in the HWC HAL component of Google Android (and Exynos systems) due to an out-of-bounds write in the Exynos_parsing_user_data_registered_itu_t_t35 function of VendorVideoAPI.cpp. This flaw stems from an incorrect bounds check and could allow for local escalation of...

PUB-A-349130926

In Exynosparsinguserdataregistereditutt35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21182

In Exynosparsinguserdataregistereditutt35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which originates in Exynosparsinguserdataregistereditutt35 in VendorVideoAPI.cpp, where due to a lack of bounds checking, out-of-bounds reads may be possible, which could lead to local...