Threats tagged 'ghsa-wv9f-qf5h-j5x5'

A Use-After-Free (UAF) vulnerability exists in the EVS AIDL HAL component due to a data race on an unsynchronized std::weak_ptr in the EvsEnumerator::openCamera() function. Concurrent calls from a privileged user ID can cause a corrupted weak_ptr state, resulting in a virtual call on a freed object's vtable. This flaw can lead to arbitrary code execution within the hal_evs_default process.