800+ IT
News
als RSS Feed abonnieren📚 Arm Mali CSF Missing Buffer Size Check
💡 Newskategorie: IT Security Tools
🔗 Quelle: packetstormsecurity.com
In the Linux Mali driver, when building with MALI_USE_CSF, the VFS read handler of the main Mali file descriptor (kbase_read()) never looks at its "count" parameter. This means that a simple userspace program that sets up a Mali file descriptor, then calls read(mali_fd, buf, 1), will see read() returning a higher length than requested, and out-of-bounds data in the userspace buffer will be clobbered. ...