Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4w8-866m-jm68

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838

EPSS

Процентиль: 70%
0.00644
Низкий

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 9.8
nvd
больше 5 лет назад

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838

EPSS

Процентиль: 70%
0.00644
Низкий

Дефекты

CWE-843