Orta CVSS 5.5
CVE-2025-20722: Rdk-b: tamsayı taşması
Açıklama (NVD)
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
Özet bilgiler
- Ürün
- Rdkcentral Rdk-b
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,09 (yüzdelik 0)
- CWE
- CWE-190
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| rdkcentral-rdk-b | 2024q1 | 2024q1 | — |
| google-android | 14.0 | 14.0 | — |
| google-android | 15.0 | 15.0 | — |
| openwrt-openwrt | 21.02.0 | 21.02.0 | — |
| openwrt-openwrt | 23.05 | 23.05 | — |