Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27q3-p62g-44fr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.

EPSS

Процентиль: 38%
0.00165
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.5
nvd
почти 4 года назад

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.

EPSS

Процентиль: 38%
0.00165
Низкий

Дефекты

CWE-787