Shuaibing Lu

**Nome do software vulnerável e versões afetadas: DriverGenius versão 9.61.3708.3054 Descrição: A vulnerabilidade permite que invasores provoquem uma falha no sistema por meio do comando ioctl 0x9c402000 no ponto de extremidade da API “.MyDrivers0 0 1”. Recomendações: Para o DriverGenius versão 9.61.3708.3054, considere desativar o driver `MyDrivers64.sys` até que um patch esteja disponível para evitar falhas no sistema por meio do comando ioctl. Restrinja o acesso ao endpoint `.MyDrivers0 0 1` para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha uma correção para este problema.

**Nome do software vulnerável e versões afetadas: Versões do APT anteriores à 2.1.2 Descrição: O problema está relacionado à falta de validação de entrada nas implementações do ar/tar, o que pode resultar em negação de serviço ao processar arquivos deb especialmente criados. Isso poderia permitir que um invasor remoto causasse uma negação de serviço. Recomendações: Para versões anteriores à 2.1.2, atualize para a versão 2.1.2 ou posterior para resolver o problema. Como solução temporária, considere restringir o uso de arquivos deb especialmente criados até que um patch esteja disponível.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device `/dev/dsscomp` with the command `1118064517` and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the argument of an ioctl on device `/dev/gcioctl` with the command `3222560159` and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, as a temporary workaround, consider restricting access to the `/dev/gcioctl` device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device `/dev/gcioctl` with the command `1077435789` and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, consider restricting access to the `/dev/gcioctl` device to minimize the risk of exploitation. Avoid using the command `1077435789` in the affected ioctl until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device file "/dev/rpmsg-omx1" with the command 3221772291, and cause a kernel crash. This is due to a flaw in the kernel component, specifically in the file 'kernel/omap/drivers/rpmsg/rpmsg omx.c'. **Recommendations** For Fire OS version 4.5.5.3, as a temporary workaround, consider restricting access to the "/dev/rpmsg-omx1" device file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Qiku 360 Phone N6 Pro 1801-A01 (affected versions not specified) **Description** The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device crash, via a crafted 0xc0d8b300 ioctl call to the /dev/block/mmcblk0rpmb driver kernel module. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.