Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-97h5-gfw2-p92x

Опубликовано: 19 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 1%
0.00012
Низкий

7.8 High

CVSS3

Дефекты

CWE-131

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 1%
0.00012
Низкий

7.8 High

CVSS3

Дефекты

CWE-131