Описание
Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00034
Низкий
7 High
CVSS3
4.4 Medium
CVSS2
Дефекты
CWE-362
Связанные уязвимости
CVSS3: 7
github
больше 3 лет назад
Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur.
EPSS
Процентиль: 9%
0.00034
Низкий
7 High
CVSS3
4.4 Medium
CVSS2
Дефекты
CWE-362