Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pr8q-hph7-m25m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194

In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194

EPSS

Процентиль: 75%
0.00873
Низкий

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
nvd
больше 5 лет назад

In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194

EPSS

Процентиль: 75%
0.00873
Низкий

Дефекты

CWE-190