The frame touch module does not make validity judgments on parameter lengths when processing specific parameters ，which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.
The vulnerability can be fixed by performing system updates.
CytQ submitted via vivo SRC.
vivo would like to thank them for working with us and coordinated vulnerability disclosure.
vivo is committed to providing users with best cyber security products and services, and follows the industrial best practice to handle and publish vunerability information.
To report a security vulnerability in vivo products and solutions, please send it to
security@vivo.com.
For details, please visit
Security Advisory.