New critical vulnerability in multiple high-privileged Android services
I skimmed it super quickly, though since no one is commenting, I'll just put this comment in there as an encouragement for others. I think the gist of it is as follows:1. There is inter process communication.2. For this there is shared memory of 64 bits.3. Some processes are 32 bits and when they get this memory, they just use the lower 32 bits.Obviously I glossed over many details, but when a 32 bit process is just getting a part of memory and leaves the rest unchecked, that sounds like a good script for the start of a vulnerability (i.e. things being left unchecked).