PT-2018-1228 · Google · Android

Publicado 2018-04-02 · Atualizado 2018-05-01 · CVE-2016-10450

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description A potential stack-based buffer overflow exists in the thermal service of Android, which can lead to root compromise. The issue is caused by an operation exceeding the buffer boundaries in memory. This can allow a remote attacker to gain access to the device with root privileges.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue. As a temporary workaround, consider restricting access to the thermal service to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2018-00696

CVE-2016-10450

Produtos afetados

Android

Referências · 6

• https://source.android.com/security/bulletin/2018-04-01 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-00696 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-10450 · Nota de Segurança
• http://securityfocus.com/bid/103671 · Nota
• https://vuldb.com/?id.116511 · Nota
• https://vulnerabilitycenter.com/#!vul=83744 · Nota