JVNDB-2014-000137

Multiple improper data validation vulnerabilities in Syslink driver for Texas Instruments OMAP mobile processors

The Syslink driver for OMAP mobile processors contained in Android devices contain mulitple improper data validation vulerabilities.

The OMAP mobile processor provided by Texas Instruments is used in some Android tablets, smartphones and other devices. The Syslink driver for some OMAP mobile processors is used to implement the communication of processes between the host and slave processors.
The Syslink driver contains multiple vulnerabilities where userland data is not properly validated prior to use. Exploitation of these vulnerabilities may lead to arbitrary code execution or kernel memory content disclosure.

Masaaki Chida of GREE, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Multiple products are affected. For more information, refer to the information provided by the developer or provider.

(Multiple Venders)

• (Multiple Products)

When the device is accessed through the Android Debug Bridge (adb), contents of the kernel memory may be obtained or arbitrary code may be executed to obtain root privileges.

[Apply an Update]
Apply the appropriate update according to the information provided by the developer or provider.

SoftBank

• Softbank : - SHARP handsets 102SH (Fix-May 31 2012 release software) (in Japanese)

NTT DOCOMO, INC.

• JVN : Information from NTT DOCOMO, INC.

1. Improper Input Validation(CWE-20) [IPA Evaluation]

1. CVE-2014-7252

1. JVN : JVN#67792023
2. National Vulnerability Database (NVD) : CVE-2014-7252

• [2014/12/02]
    Web page was published
  [2014/12/09]
    References : Content was added