Android IOMXNodeInstance::enableNativeBuffers Unchecked Index

Discussion in 'News Aggregator' started by Packet Storm, 3 Dec 2016.

  1. Packet Storm

    Packet Storm Guest

    The code in IOMXNodeInstance.cpp that handles enableNativeBuffers uses port_index without validation, leading to writing the dword value 0 or 1 at an attacker controlled offset from the IOMXNodeInstance structure.

    Continue reading...
     
    #1 Packet Storm, 3 Dec 2016
(You must log in or sign up to post here.)

Share This Page

Loading...