An issue exists on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
google android 4.4 |
||
google android 5.0 |
||
google android 5.1 |
||
google android 6.0 |