FPII-2610: Information disclosure vulnerability in Qualcomm components CVE-2016-6757 A-30148242
An information disclosure vulnerability in Qualcomm components including the camera driver and
video driver could enable a local malicious application to access data outside of its permission levels.
This issue is rated as Moderate because it first requires compromising a privileged process.
Additional technical details:
A-30148242 (Qualcomm ref#: CR#1052821)
The format specifier %p can leak kernel addresses.
The fix is designed to use %pK instead of %p, which also evaluates whether kptr_restrict is set.
Change-Id: I0ffcd27468fdb9126c17b8df39ae0b9fc0dcbdb8
13 files changed