CVE-2012-2808

CVE-2012-2808 affects Android's Bionic DNS resolver, where the PRNG used to generate DNS query IDs and UDP source ports relies on time and PID. This weakens randomness, facilitating remote spoofing of DNS responses. The connected CVE-2015-0800 describes a related Android Firefox DNS-spoofing issu...

CVE-2012-2674

CVE-2012-2674 affects Android’s C library (Bionic) malloc_debug_leak.c where three functions (chk_malloc, leak_malloc, leak_memalign) exhibit integer overflows when libc.debug.malloc is enabled. This leads to scenarios where a large allocation size can cause under-allocation, enabling memory-rela...