exploitDog

CVE-2021-39718

Опубликовано: 16 мар. 2022

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205035540References: N/A

Ссылки

https://source.android.com/security/bulletin/pixel/2022-03-01
Vendor Advisory
https://source.android.com/security/bulletin/pixel/2022-03-01
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00016

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-7fc5-pgp3-3g9m

CVSS3: 6.7

github

почти 4 года назад

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205035540References: N/A

EPSS

Процентиль: 3%

0.00016

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787