Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-63qh-xc4p-2395

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.

EPSS

Процентиль: 25%
0.00088
Низкий

7.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
nvd
больше 8 лет назад

In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.

fstec
почти 10 лет назад

Уязвимость во всех компонентах Qualcomm операционной системы Android из репозитория CAF,использующей ядро Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 25%
0.00088
Низкий

7.8 High

CVSS3

Дефекты

CWE-119