Description
The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
References
- [oss-security] 20140308 Re: CVE Request: thermald mailing-list
- [oss-security] 20140308 CVE Request: thermald mailing-list