Lucene search

China National Vulnerability DatabaseCNVD-2024-01379

HistoryNov 01, 2023 - 12:00 a.m.

Google Android Information Disclosure Vulnerability (CNVD-2024-01379)

2023-11-0100:00:00

China National Vulnerability Database

www.cnvd.org.cn

google android

linux-based

open source

information disclosure

vulnerability

missing boundary check

canonicalize_md.c

attacker

sensitive information

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.7%

JSON

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a missing boundary check when canonicalize_md.c crashes. An attacker can exploit this vulnerability to obtain sensitive information.

CPENameOperatorVersion
google androidlt14.0

CPE	Name	Operator	Version
	google android	lt	14.0

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.7%

JSON

Related for CNVD-2024-01379