PT-2020-11500
CVE-2020-0139
·
تاريخ النشر
2020-06-11
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
The issue is related to a possible out of bounds read due to an integer overflow in the
NDEF MsgValidate function of ndef utils.c. This could lead to local information disclosure if a malformed NFC tag is provided by the firmware. Exploitation requires system execution privileges and does not need user interaction.Recommendations
For Android version Android-10, update to a version that includes the fix for this issue to prevent potential local information disclosure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾