The Samsung Graphics 2D driver (/dev/fimg2d) is accessible by unprivileged users/applications. It was found that the ioctl implementation for this driver contains a locking error which can lead to memory errors (such as use-after-free) due to a race condition.
a3f38084cb1d4d13978aaba6602e9965fb1df0bed4c3c2f913708f75b9b78245