Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m3j9-2rhw-rjxm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245

In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245

EPSS

Процентиль: 3%
0.00016
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.4
nvd
около 5 лет назад

In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168712245

EPSS

Процентиль: 3%
0.00016
Низкий

Дефекты

CWE-125