Tachyon Server Command Buffer Overflow

Tachyon is a server-side component used in Android devices. It's responsible for handling commands from the device's user interface. This vulnerability allows an attacker to execute arbitrary code on the device by manipulating the command buffer, potentially leading to local escalation of privilege.

Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Update your device's Android build system to android-latest-release instead of aosp-main. For more information, see the AOSP Security Bulletin.
2. Immediate mitigations:
3. Restrict network access to your Tachyon Server instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized command execution

• Vendor Advisory