Lucene search

K
osvGoogleOSV:ASB-A-287184435
HistoryAug 01, 2024 - 12:00 a.m.

a2dp_fuzz: Heap-buffer-overflow in sdpu_compare_uuid_with_attr

2024-08-0100:00:00
Google
osv.dev
5
a2dp
fuzz
sdpu_compare_uuid_with_attr
heap buffer overflow
remote information disclosure
software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

High

EPSS

0.001

Percentile

25.9%

In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

High

EPSS

0.001

Percentile

25.9%

Related for OSV:ASB-A-287184435