Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr6w-v3fj-8cj6

Опубликовано: 07 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609.

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609.

EPSS

Процентиль: 7%
0.00026
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.7
nvd
10 месяцев назад

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609.

CVSS3: 6.7
fstec
10 месяцев назад

Уязвимость компонента vdec микропрограммного обеспечения микросхем MediaTek, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 7%
0.00026
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787