Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfqf-v4g7-45g7

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112

EPSS

Процентиль: 91%
0.06064
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
nvd
больше 7 лет назад

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-109699112

CVSS3: 7.5
fstec
больше 7 лет назад

Уязвимость функции avrc_pars_browsing_cmd компонента Bluetooth операционной системы Android, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 91%
0.06064
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416