Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xph-x349-j5rr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669

In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669

EPSS

Процентиль: 81%
0.01617
Низкий

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150159669

EPSS

Процентиль: 81%
0.01617
Низкий

Дефекты

CWE-190