PT-2018-1214 · Google · Android
Publicado
2018-04-02
·
Atualizado
2018-05-02
·
CVE-2016-10476
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-04-05
Description
The issue is caused by missing array index checks on app index in the
qcril uim clear encrypted pin function, resulting in accessing addresses outside the bounds of the buffer when the app index is too large. This can lead to a buffer overflow. The vulnerability may allow a remote attacker to cause a buffer overflow.Recommendations
For Android versions prior to 2018-04-05, consider applying the April 2018 security patch level to resolve the issue. As a temporary workaround, restrict access to the
qcril uim clear encrypted pin function to minimize the risk of exploitation.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android