PT-2023-22847
CVE-2023-30652
·
تاريخ النشر
2023-07-06
·
تاريخ التحديث
2023-07-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
sysinput HAL service versions prior to SMR Jul-2023 Release 1
Description
The issue is related to an out of bounds read and write in the
callrunTspCmdNoRead function of the sysinput HAL service. This allows local attackers to execute arbitrary code.Recommendations
For versions prior to SMR Jul-2023 Release 1, update to SMR Jul-2023 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
callrunTspCmdNoRead function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾