PT-2021-2465
CVE-2021-0457
·
تاريخ النشر
2021-03-01
·
تاريخ التحديث
2021-03-15
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a heap buffer overflow in the FingerTipS touch screen driver, which could lead to a local escalation of privilege. This requires System execution privileges and does not need user interaction for exploitation.
Recommendations
For Android kernel, consider applying a patch or fix to address the heap buffer overflow issue in the FingerTipS touch screen driver as soon as one becomes available. As a temporary workaround, restricting access to the
fts driver test write function may help minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾