Liang Ming

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device file "/dev/rpmsg-omx1" with the command 3221772291, and cause a kernel crash. This is due to a flaw in the kernel component, specifically in the file 'kernel/omap/drivers/rpmsg/rpmsg omx.c'. **Recommendations** For Fire OS version 4.5.5.3, as a temporary workaround, consider restricting access to the "/dev/rpmsg-omx1" device file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device `/dev/dsscomp` with the command `1118064517` and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fire OS version 4.5.5.3 **Description** The issue allows attackers to inject a crafted argument via the `argument` of an ioctl on device `/dev/gcioctl` with the command `1077435789` and cause a kernel crash. **Recommendations** For Fire OS version 4.5.5.3, consider restricting access to the `/dev/gcioctl` device to minimize the risk of exploitation. Avoid using the command `1077435789` in the affected ioctl until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Qiku 360 Phone N6 Pro 1801-A01 (affected versions not specified) **Description** The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device crash, via a crafted 0xc0d8b300 ioctl call to the /dev/block/mmcblk0rpmb driver kernel module. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.