Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm3w-4959-2496

Опубликовано: 16 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195573629References: N/A

In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195573629References: N/A

EPSS

Процентиль: 3%
0.00017
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.7
nvd
около 4 лет назад

In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195573629References: N/A

EPSS

Процентиль: 3%
0.00017
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269