New critical vulnerability in multiple high-privileged Android services
I skimmed it super quickly, though since no one is commenting, I'll just put this comment in there as an encouragement for others. I think the gist of it is as follows:<p>1. There is inter process communication.<p>2. For this there is shared memory of 64 bits.<p>3. Some processes are 32 bits and when they get this memory, they just use the lower 32 bits.<p>Obviously I glossed over many details, but when a 32 bit process is just getting a part of memory and leaves the rest unchecked, that sounds like a good script for the start of a vulnerability (i.e. things being left unchecked).