In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.Referenceshttps://source.android.com/security/bulletin/2017-06-01http://www.securitytracker.com/id/1038623