Overreliance on user-space input without validation Insecure communication channels Poor privilege isolation between apps and root-level functions Past examples include an APatch flaw that allowed any ...