Описание
The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до gra-ul00c00b197 (исключая)
Одновременно
cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00058
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.
EPSS
Процентиль: 18%
0.00058
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-119