-
CVE-2024-38408 – Cryptographic Issues in BT Controller (7 Nov 2024)
Preface: Snapdragon 8 Gen 2 SoC comes with many new features and technologies such as new tri-cluster architecture, AI improvements, ray tracing support, and more. However, one largely overlooked feature is dual Bluetooth. Now, it’s not going to revolutionize the Bluetooth experience on mobile devices, but it will actually solve some of the fundamental problems…
-
About CVE-2024-43080: So called Intent Redirection by Google (4th Nov 2024)
Preface: What is intent redirection and app security in Android? An intent redirection occurs when an attacker can partly or fully control the contents of an intent used to launch a new component in the context of a vulnerable app. Background: An Intent in the Android operating system is a software mechanism that allows users…
-
CVE-2024-45184: Design weakness found in Exynos, a system-on-chip based on Samsung’s ARM development (October 14, 2024)
Preface: USAT (USIM Application Toolkit) technology is based on the original passive operation mode of the SIM card and adds the new active operation capability of the SIM card, which allows applications and services in the SIM card to actively interact with mobile terminals. Background: The USAT (USIM Application Toolkit) is a standardized set of…
-
Is Qualcomm CVE-2024-23369 the same as CVE-2022-33278? (9th Oct 2024)
Preface: Security patches can be divided into 2 categories — HLOS (High Level Operating System) and NON-HLOS. The first category is for patches concerning the Android system itself and the Linux kernel, and the other is about code running at much lower levels. Background: The software image running on the main processor is termed as…
-
About Android Framework: Bypass CVE-2022-20338, formed CVE-2024-40662 (11th Sep 2024).
Preface: What is a malformed URI? The JavaScript exception “malformed URI sequence” occurs when URI encoding or decoding wasn’t successful. Background: URI definition In computer terms, a Uniform Resource Identifier (URI) is a string used to identify the name of a certain network resource. This identification allows users to interact with any resource (including local…
-
CVE-2024-38401: Use After Free in Qualcomm IPC (3rd Sep 2024)
Preface: Race conditions arise when multiple threads attempt to access a shared resource without proper synchronization, often leading to vulnerabilities such as concurrent use-after-free. To mitigate their occurrence, operating systems rely on synchronization primitives such as mutexes, spinlocks, etc. Background: The Qualcomm Type 1 Hypervisor facilitates the hosting of multiple trusted execution environments for secure…
-
About CVE-2024-20084 and CVE-2024-20085: MediaTek’s System-on-Chip Design weakness (2nd Sep 2024)
Preface: When an out-of-bounds read occurs, typically the product has already made a separate mistake, such as modifying an index or performing pointer arithmetic that produces an out-of-bounds address. Background: MediaTek JPEG Decoder is the JPEG decode hardware present in MediaTek SoCs. The jpeg decoder hardware device node which should be added as subnodes to…
-
Get closer look CVE-2024-39920: About “SnailLoad” issue (5-Jul-2024)
NVD Published Date: 07/03/2024 Preface: How is RTT measured in TCP? Measures the time from sending a packet to getting an acknowledgment packet from the target host. Background: A new technology standard called “RFC 9293” was released on August 18, 2022. Highlight: -Acknowledgment Number: 32 bits – If the ACK control bit is set, this…
-
CVE-2024-20081: Out-of-bounds write in gnss, response by Mediatek security advisory. (2nd July 2024)
Preface: GPS traditionally refers to the North American Global Positioning System, or satellite positioning system. GNSS is the term for the international multi-constellation satellite system. Therefore, GNSS typically includes GPS, GLONASS, Baidu, Galileo, and any other constellation system. Background: GNSS positioning modules or chips, as the core component of In-vehicle Infotainment systems, provide position, speed,…
-
CVE-2024-38663: blk-cgroup – fix list corruption from resetting io stat (25-June-2024)
Preface: Android uses cgroups to control and account for system resources such as CPU and memory usage and allocation, with support for Linux kernel cgroups v1 and cgroups v2. Background: New IO stats are stored in the percpu iostat_cpu within blkcg_gq (blkg). There are multiple blkg’s (one for each block device) attached to each blkcg.…