Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w6j9-57w3-6829

Опубликовано: 16 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

EPSS

Процентиль: 20%
0.00063
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
redhat
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
nvd
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
debian
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, ...

CVSS3: 4.6
fstec
больше 3 лет назад

Уязвимость компонента hid-lg.c ядра операционной системы Android, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 20%
0.00063
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-125