Description
In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Android | Android SoC | — |
Advisories 3
- WID-SEC-2023-1669 Android Patchday Juli 2023 BSI CERT-Bund (WID) · Sep 6, 2023
- WID-SEC-2023-1672 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 5, 2023
- WID-SEC-2023-1365 Android Patchday Juni 2023 BSI CERT-Bund (WID) · Jun 5, 2023