PT-2017-16628 · Oneplus · Oxygenos

Roee Hay + 1 · Publicado 2017-04-25 · Atualizado 2017-05-05 · CVE-2017-5625

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OxygenOS versions prior to 4.0.3

Description The issue allows an unauthorized attacker to partially dump the ciphertext content of an arbitrary partition, except 'keystore', by using the 'fastboot oem dump ' command. This affects OnePlus 3 and 3T devices.

Recommendations For OxygenOS versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2017-5625

Produtos afetados

Oxygenos

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-5625 · Nota de Segurança
• https://alephsecurity.com/vulns/aleph-2017006 · Nota
• https://osv.dev/vulnerability/CVE-2017-5625 · Aviso do Fabricante