Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c2f3-v6vh-fq3v

Опубликовано: 28 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213

EPSS

Процентиль: 5%
0.00023
Низкий

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.7
nvd
больше 2 лет назад

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213

EPSS

Процентиль: 5%
0.00023
Низкий

6.7 Medium

CVSS3