PT-2022-11001
CVE-2021-39722
·
تاريخ النشر
2022-03-16
·
تاريخ التحديث
2022-03-22
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to an incorrect bounds check in the
ProtocolStkProactiveCommandAdapter::Init function of protocolstkadapter.cpp, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation.Recommendations
For Android kernel, consider applying a patch that fixes the incorrect bounds check in the
ProtocolStkProactiveCommandAdapter::Init function to prevent potential out of bounds read and local information disclosure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾