Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5r8-j6cr-3q26

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data.

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data.

EPSS

Процентиль: 38%
0.00166
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.8
nvd
больше 4 лет назад

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data.

EPSS

Процентиль: 38%
0.00166
Низкий

Дефекты

CWE-125