PT-2017-3690

CVE-2017-18135

·

تاريخ النشر

2017-11-06

·

تاريخ التحديث

2018-05-11

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05
Description: A buffer overflow issue exists in the Wireless Data Service (WDS) module of Android, specifically on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850. This issue can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations: For Android versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wireless Data Service (WDS) module to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾