PT-2018-4491 · Google · Android
Publicado
2018-04-18
·
Atualizado
2018-05-10
·
CVE-2015-9157
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2018-04-05 security patch level
Description
The issue arises in the
widevine dash cmd handler() function where response buffers are passed to widevine commands without proper validation. These buffers contain values such as buffer lengths that need to be validated to prevent buffer overflow or over-reads. However, since these buffers are not always in locked memory, a time-of-check, time-of-use issue can occur. This means that even if the value is checked and found valid, a race condition can still occur where the memory is swapped out with a different, possibly out of range, value.Recommendations
For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.
Correção
Race Condition
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Android