FPII-2522 : Elevation of privilege vulnerability in Synaptics touchscreen driver CVE-2016-6745 A-31252388
High
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
Additional technical details:
A-31252388
The global variable fwu is accessible in the fwu_sysfs_image_size_store and fwu_sysfs_store_image functions without any locks. This results in a potential race condition leading to a heap overflow.
The fix is designed to add locks to prevent the potential race condition.
Code snippet provided in bulletin patches zip file in the Downloads section: https://support.google.com/androidpartners_security/answer/7169146?hl=en&ref_topic=6353496#downloads
Change-Id: Ibf82dd6c4af5220094a13f694540f5ff624038cf
1 file changed