Issue #1251: GraphicBuffer overflow vulnerability - CVE-2015-1474 - Replicant

Actions

Copy link

Issue #1251

closed

GraphicBuffer overflow vulnerability - CVE-2015-1474

Added by My Self over 9 years ago. Updated about 9 years ago.

Status:

Closed

Priority:

High

Assignee:

My Self

Category:

Security

Target version:

Any version

Start date:

03/30/2015

Due date:

% Done:

100%

Estimated time:

Resolution:

fixed

Device:

Grant:

Type of work:

Description

I've checked, that Replicant is vulnerable to the GraphicBuffer overflow (bug: 18076253), registered as CVE-2015-1474.
More informations: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1474

Solution/Patch
Android diff: https://android.googlesource.com/platform/frameworks/native/+/38803268570f90e97452cd9a30ac831661829091

Files

CVE-2015-1474.patch (2.01 KB) CVE-2015-1474.patch

My Self, 08/26/2015 11:34 AM

Actions

Copy link

Updated by My Self over 9 years ago

The patch is provided to the mailing list, now: http://lists.osuosl.org/pipermail/replicant/Week-of-Mon-20150330/000666.html

Actions

Copy link

Updated by My Self about 9 years ago

File CVE-2015-1474.patch added

I decided to attach the patch listed above, (and tested with the current Replicant 4.2 sources) on this ticket.
After flashing the patched Replicant, I've tested my productive device several months without any misbehavior.

@everyone: please review the patch and apply it if you like.

Actions

Copy link