An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCKET driver allows local privilege escalation via a stack-based buffer overflow. The Samsung ID is SVE-2016-5393 (April 2016).
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://security.samsungmobile.com/securityUpdate.smsb | vendor advisory |