A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
Study finds 97 Android IPC enforcement gaps, including URI schemes handling sensitive data.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #aosp
Memory-safety defects in the upstream (abandoned) AOSP OpenCORE AAC decoder, shipped unpatched by Samsung TizenRT
Abandoned AOSP OpenCORE AAC decoder has out-of-bounds-write and wild-pointer flaws reachable from attacker-controlled frames, unpatched in Samsung TizenRT.