PT-2022-15988
CVE-2022-23429
·
تاريخ النشر
2022-02-11
·
تاريخ التحديث
2022-02-18
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Audio HAL Service versions prior to SMR Feb-2022 Release 1
Description
The issue is caused by an improper boundary check in the audio hal service, allowing attackers to read invalid memory, which can lead to an application crash.
Recommendations
For versions prior to SMR Feb-2022 Release 1, update to SMR Feb-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the audio hal service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾