PT-2020-11755

CVE-2020-0403

·

تاريخ النشر

2020-09-17

·

تاريخ التحديث

2020-09-23

الوصف من

CVSS 2.0
7.2
عالية
المقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to an exposed test feature in the FPC TrustZone fingerprint App, which could lead to a local escalation of privilege in the TEE. System execution privileges are required for exploitation, and user interaction is not needed.
Recommendations For Android kernel, consider restricting access to the test feature in the FPC TrustZone fingerprint App to minimize the risk of exploitation. As a temporary workaround, disabling the exposed test feature until a patch is available may help mitigate the issue.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾