Vulnerabilities tagged "information-disclosure"

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain

An in-the-wild exploit chain was discovered that exploits three vulnerabilities in Samsung exynos devices running kernel 4.14.113. It consisted of one userland exploit in Samsung's custom clipboard provider, a kernel infoleak through their `sec_log` functionality, and finally a UAF in the Display Processing Unit (DPU) driver.