15
edits
Security/Reviews/Gaia/Music: Difference between revisions
→4. Denial of Service
| Line 114: | Line 114: | ||
====4. Denial of Service ==== | ====4. Denial of Service ==== | ||
It might be possible to confuse the meta-data parser by storing a malformed or constructed audio file on the device. This could lead to the library failing to render or audio files missing. None of which is serious enough to consider. | |||
Since all file parsing is done in high level JavaScript, there is no way that the above attack could lead to a privilege escalation or code execution attack. | |||
====5. Use of Privileged APIs ==== | ====5. Use of Privileged APIs ==== | ||