TrendMicro information about the vulnerability (CVE not assigned) in the driver , allowing an unprivileged local user to execute their code in the context of the Linux kernel. Details of the vulnerability are provided in the context of the Android platform, without clarifying whether this issue is specific to the Android kernel or also occurs in the standard Linux kernel.
Exploitation of the vulnerability requires local access for the attacker to the system. In Android, to carry out the attack, the attacker must first gain control over an unprivileged application that has permissions to access the V4L (Video for Linux) subsystem, such as a camera application. The most realistic use of the vulnerability in Android is to embed the exploit in malicious applications prepared by attackers to escalate privileges on the device.
Currently, the vulnerability remains unpatched. Despite Google being notified of the issue in March, the fix has not been included in of the Android platform. The September security patch set for Android addresses 49 vulnerabilities, four of which have been assigned a critical severity level. Two critical vulnerabilities have been fixed in the multimedia framework and allow code execution when processing specially crafted multimedia data. 31 vulnerabilities have been addressed in Qualcomm chip components, two of which are critical and allow for remote attacks. The remaining issues are marked as dangerous, meaning they can execute code in the context of a privileged process through manipulation of local applications.
Källa: opennet.ru
