Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2prh-76mq-h4gx

Опубликовано: 11 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

EPSS

Процентиль: 83%
0.02007
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-125
CWE-1284

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

EPSS

Процентиль: 83%
0.02007
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-125
CWE-1284