CVE-2021-30355

CVE-2021-30355 affects Amazon Kindle e-reader firmware up to version 5.13.4. The issue is a local privilege escalation where the Kindle framework user can elevate to root due to improper privilege management. A related chain involves a heap overflow in the PDF rendering path (CVE-2021-30354) that...

CVE-2021-30354

CVE-2021-30354 affects Amazon Kindle e-reader up to and including version 5.13.4. The issue is an integer overflow that leads to a heap-based buffer overflow in CJBig2Image::expand(), causing memory corruption and potential code execution when parsing a crafted PDF book. Connected documents confi...