CVE-2016-6707

Related Files

Android android.graphics.Bitmap Inter-Process munmap

Posted Dec 2, 2016

Authored by Google Security Research, laginimaineb

Bitmap objects can be passed between processes by flattening them to a Parcel in one process and un-flattening them in another. In order to conserve memory, there exists a code path which allows Bitmaps to be shared between processes by providing an ashmem-mapped file descriptor containing the Bitmap's raw pixel data. The android.graphics.Bitmap class illegally assumes that the size of the ashmem region provided by the user matches the actual underlying size of the Bitmap.

tags | exploit

advisories | CVE-2016-6707

SHA-256 | 043a3329589da90bcd2c6c0063a9bb264211f6a7b9a85049fc1e91ac861f231e

Download | Favorite | View