Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5gjx-xwmm-pw26

Опубликовано: 25 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339

EPSS

Процентиль: 38%
0.00164
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339

EPSS

Процентиль: 38%
0.00164
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416