Описание
In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206718630
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00125
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-908
Связанные уязвимости
github
почти 4 года назад
In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206718630
EPSS
Процентиль: 32%
0.00125
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-908