PT-2012-5263
CVE-2012-4221
·
تاريخ النشر
2012-11-30
·
تاريخ التحديث
2013-10-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Android versions 2.3 through 4.2
Description
The issue is related to an integer overflow in the diagchar core.c file of the Qualcomm Innovation Center (QuIC) Diagnostics kernel-mode driver. This allows attackers to execute arbitrary code or cause a denial of service via an application that uses crafted arguments in a local
diagchar ioctl call.Recommendations
For Android versions 2.3 through 4.2, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾