Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g3p7-6jrm-6c7q

Опубликовано: 11 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 5.5
nvd
больше 1 года назад

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120