An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016).
Software | From | Fixed in |
---|---|---|
google / android | 4.4 | 4.4.x |
google / android | 5.0 | 5.0.x |
google / android | 5.1 | 5.1.x |
google / android | 6.0 | 6.0.x |