Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4fw3-96wh-rv55

Опубликовано: 03 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

EPSS

Процентиль: 6%
0.00166
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.1
nvd
около 1 месяца назад

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

EPSS

Процентиль: 6%
0.00166
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-787