Not rated
CVE-2016-8438 Integer overflow leading to a TOCTOU condition in hypervisor PIL
Description
Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR#1023638.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
Other CVEs of Android
The 960 CVEs of Android →
CVE-2018-9577
In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to…
Not rated
CVE-2018-9569
In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect…
Not rated
CVE-2018-9519
In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition
Not rated
CVE-2018-9517
In pppol2tp_connect, there is possible memory corruption due to a use after free
Not rated