Lucene search

K
osvGoogleOSV:ASB-A-198346478
HistoryDec 01, 2021 - 12:00 a.m.

[AIDL] uninitialized memory reads with C++ enum values in bundles [unverified]

2021-12-0100:00:00
Google
osv.dev
6
information disclosure
uninitialized data
parcelable vulnerability
binder transactions
local security
software vulnerability

EPSS

0

Percentile

5.1%

In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-198346478