Kusagadzikana mutyairi v4l2 inokanganisa Android platform

TrendMicro Company yakabudiswa ruzivo rwekusagadzikana (CVE haina kupihwa) mumutyairi v4l2, iyo inobvumira mushandisi wemuno asina rusarura kuti aite kodhi yavo mumamiriro eiyo Linux kernel. Ruzivo rwekusagadzikana rwunopihwa mukati meiyo Android chikuva, pasina kudonongodza kana dambudziko iri rakanangana neiyo Android kernel kana kuti inoitikawo mune yakajairwa Linux kernel.

Kuti ashandise kusagadzikana, anorwisa anoda kuwanikwa kwenzvimbo kune system. Mu Android, kuti urwise, iwe unofanirwa kutanga watora kutonga kweiyo isina kurongeka application ine mvumo yekuwana iyo V4L (Vhidhiyo yeLinux) subsystem, semuenzaniso, chirongwa chekamera. Iko kushandiswa kwechokwadi kwekusagadzikana mu Android ndeyekusanganisira kushandiswa mune zvakaipa zvikumbiro zvakagadzirirwa nevanorwisa kuwedzera ropafadzo pachishandiso.

Kusagadzikana kunoramba kusati kwagadziriswa panguva ino. Kunyangwe Google yakaziviswa nezvenyaya iyi munaKurume, kugadzirisa hakuna kuverengerwa mu September update Android platforms. Iyo yaSeptember Android chengetedzo chigamba inogadzirisa 49 kusasimba, ayo mana akaverengerwa seakakosha. Kusagadzikana kuviri kwakakomba kwakagadziriswa mumultimedia chimiro uye kubvumira kodhi kuuraya kana uchigadzira yakanyatso gadzirwa multimedia data. 31 kusasimba kwakagadziriswa muzvikamu zveQualcomm machipisi, ayo maviri ekusagadzikana akapihwa nhanho yakakosha, achibvumira kurwiswa kure. Matambudziko akasara akanyorwa seane ngozi, i.e. bvumira, kuburikidza nekunyengedza kwezvikumbiro zvemunharaunda, kuita kodhi mumamiriro ekuita kwakasarudzika.

Source: opennet.ru

Voeg