Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wj6-xwvq-325w

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
11 месяцев назад

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-787