Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rqvx-rx9q-529r

Опубликовано: 24 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258652631

In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258652631

EPSS

Процентиль: 84%
0.02267
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258652631

CVSS3: 9
fstec
почти 3 года назад

Уязвимость компонента System операционной системы Android, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 84%
0.02267
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787