PT-2023-15711 · Google · Widevine Trusted Application
CVE-2022-48332
·
Publicado
2023-06-26
·
Atualizado
2023-07-03
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Widevine Trusted Application (TA) versions 5.0.0 through 5.1.1
Description
The issue is related to a drm save keys file name len integer overflow, which results in a buffer overflow.
Recommendations
For versions 5.0.0 through 5.1.1, consider restricting access to the drm save keys function until a patch is available.
As a temporary workaround, avoid using the
file name len variable in the affected function until the issue is resolved.Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Widevine Trusted Application