Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j93w-j7jm-5c8h

Опубликовано: 15 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

EPSS

Процентиль: 0%
0.00005
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.7
nvd
10 месяцев назад

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

CVSS3: 6.7
fstec
10 месяцев назад

Уязвимость операционной системы Google ChromeOS, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 0%
0.00005
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787