CVE-2022-20555
In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
影響パッケージ
Android
platform/system/libufdt
[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}]
参照URL
- advisory source.android.com
- patch android.googlesource.com