Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fwpv-rgxh-fj74

Опубликовано: 20 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation.

In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 81%
0.01584
Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 года назад

In HeadsetInterface::ClccResponse of btif_hf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 81%
0.01584
Низкий

7.5 High

CVSS3

Дефекты

CWE-787