Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9229-h595-7v7w

Опубликовано: 12 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029

EPSS

Процентиль: 4%
0.00018
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
nvd
почти 4 года назад

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-203938029

EPSS

Процентиль: 4%
0.00018
Низкий

Дефекты

CWE-125